Binance traces $6.3B hack to fake job interviews, compromised AI tool
Hackers exploited compromised employee computers and stolen credentials to breach Binance’s wallet infrastructure, according to the exchange’s investigation.
Binance has traced a $6.3 billion hack to a sophisticated social engineering campaign involving fake job interviews and a compromised artificial intelligence tool. According to the exchange's internal investigation, hackers gained access to employee computers and harvested stolen credentials, which were subsequently used to breach Binance's wallet infrastructure. The attack represents one of the most significant security incidents in the exchange's history.
The method employed by the attackers reflects a growing trend in the crypto industry where threat actors target human vulnerabilities rather than technical systems directly. By posing as recruiters and using compromised AI-powered tools, the hackers were able to infiltrate employee devices and move laterally through Binance's internal network. This approach, sometimes referred to as a supply-chain or insider-vector attack, has been increasingly documented across major financial platforms.
The incident carries broad implications for the cryptocurrency industry, highlighting the urgent need for enhanced employee cybersecurity training and stricter access controls around sensitive infrastructure. Exchanges and custodians may face renewed pressure from regulators and institutional partners to demonstrate robust operational security frameworks, particularly as the sector continues its push toward mainstream adoption.
Observers will be watching closely for any regulatory response to the breach, as well as Binance's formal remediation measures and whether affected users will receive compensation. Further technical details surrounding the compromised AI tool are also expected to emerge as the investigation continues.
Source: Cointelegraph
