Binance reveals how North Korean hackers infiltrated its systems through a months-long cyber operation before stealing $6.34 billion in digital assets. - June: The attackers took advantage of a homebrew software installation that was hatched to expose the role of wallet engineers and colleagues. - September: Hackers posed as recruiters and company managers during fake job interviews, tricking another engineer into downloading a malicious coding assignment. - October 20: The attackers used a compromised computer and an internal AI tool to access two other wallet engineer devices and steal credentials. - October 29: Using the stolen credentials, hackers deployed a malicious container and gained access to the internal signing operations of the Binance wallet. - The attackers exploited the EIP-7702 authorization mechanism of websites to give a smart contract malicious control over wallet transactions. - They bypassed normal withdrawal controls and transferred approximately $6.34 billion in digital assets to addresses controlled by attackers. The FBI attributed the attack to North Korea.