Vibecoding and a fake interview led to the hack of Binance - according to the exchange, it was not a scam from the DPRK, about which the media wrote that on Tuesday the hackers had been preparing the attack for five months: June: Binance DevOps engineer wanted to install a popular tool among Vibecoders, followed the first link on Google and downloaded a fake homebrew installer with a virus. The defense worked, but the attackers were able to discover the names of the engineers responsible for the wallets; September: One of these engineers was invited for a mock interview. It was asked to complete a mandatory testing task, which contained malware in its GitHub repository. The antivirus doesn't notice it; October 20: Through the infected computer of an engineer who never passed the interview, hackers began to penetrate the computers of his colleagues and obtain access tokens to manage wallets; October 29: Attackers took over the transaction signing service and started withdrawing cryptocurrency. They stole 18,270 Bitcoins, 233 million XRP tokens, and almost a million SOL tokens. In 2026, Binance's security team repelled 57 attacks allegedly linked to North Korean hackers. The 58th succeeded.