Fake job interview gave North Korean hackers foothold in record US$6.3bn Binance theft
Key points
- Binance said a sham recruitment process gave attackers a foothold to drain US$6.3 billion on Oct. 29
- The FBI blamed North Korea
- Binance said the operation began in June 2026, and in September a job-seeking software engineer was approached on a job-hunting platform
Binance said in its initial incident report that a sham recruitment process gave attackers a foothold to drain US$6.3 billion from the exchange on Oct. 29, 2026. The FBI blamed North Korea. Binance said the operation began in June 2026, and in September an engineer seeking a new job was approached on a legitimate job-hunting platform.
Original report: Human Resources Director ↗Edited with AI assistance. Facts are based on official sources and original reports.