{
  "id": 18090655,
  "title": "How Did Binance Get Hacked? It All Started With A Job Interview...",
  "url": "https://urgent.news/2026/11/04/how-did-binance-get-hacked-it-all-started-with-a-job-interview",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-04T07:30:43.000Z",
  "source": {
    "name": "Free Press Journal",
    "slug": "free-press-journal",
    "url": "https://www.freepressjournal.in/tech/how-did-binance-get-hacked-it-all-started-with-a-job-interview"
  },
  "original_language": "en",
  "account": "Binance, the world's largest cryptocurrency exchange, has disclosed a preliminary investigation into a staggering $6.3 billion heist from its platform. The hackers behind the attack are believed to be North Korean-linked. Their strategy began with a series of audacious moves, starting with a fraudulent job interview arranged by a rogue recruiter.\n\nA Binance software engineer, while searching for an AI coding tool online, unknowingly downloaded a compromised file. This seemingly innocuous action provided the attackers a backdoor into the exchange's wallet systems. The report is the most comprehensive account yet of how this massive heist unfolded.\n\nAccording to Binance, the attack was multi-faceted, involving a fake recruitment process, malicious downloads, compromised internal AI tools, endpoint compromise, and an advanced transaction authorization method. Co-CEO Richard Teng emphasized that the full report was being released to highlight the lessons learned that extend beyond Binance itself.\n\nThe loss incurred by Binance is reported to be approximately $6.34 billion. The company is still investigating the incident with the help of independent security firms reviewing their findings. The breach is said to have started months prior to the theft. In June, a wallet DevOps engineer unknowingly downloaded a malicious file while trying to install an AI coding tool. This opened the door for the attackers to learn about the engineering team and gain access to container deployment permissions.\n\nIn September, a second engineer received a job interview request from someone posing as a project director. The initial interview was a video call with a seemingly trustworthy HR representative. The second round of interviews took place on a chat app with an individual claiming to be the CEO of a fictitious company.",
  "summary": "Binance has published a preliminary investigation into the theft of about $6.3 billion from its platform. It says North Korea-linked hackers began with a fake job interview aimed at one of its engineers. A tampered file on a work laptop then gave the attackers a route into the exchange's wallet systems. The report is the most detailed account yet of how the heist unfolded. Binance released the…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}