Cryptocurrency exchange Binance revealed how North Korean hackers carried out a sophisticated, months-long cyber operation that culminated in the theft of $6.34 billion in digital assets on October 29, one of the largest cryptocurrency heists ever recorded. According to Binance's investigation, the attackers initially compromised an engineer by installing botched homebrew software in June, then infiltrated another employee computer through a fraudulent recruitment interview and malicious coding assignment in September. On October 20, they exploited a compromised internal AI tool to access additional engineers' devices and steal credentials, before deploying a malicious container in the signing infrastructure of a Binance wallet on October 29. The hackers then exploited the sites' EIP-7702 authorization mechanism to divert funds outside of normal withdrawal controls. The FBI attributed the attack to North Korea's TraderBog hacking operation. As of November 3, Binance reported that approximately $2.85 billion had been frozen or seized, while 98% of affected customer assets had been restored using the company's resources. Binance rebuilt compromised systems, strengthened security controls and commissioned an independent cybersecurity review. North Korea denied responsibility for the attack.

Cryptocurrency exchange Binance revealed how North Korean hackers carried out a sophisticated, months-long cyber operation that culminated in the theft of $6.34 billion in digital assets on October 29, one of the largest cryptocurrency heists ever recorded. According to Binance's investigation, the attackers initially compromised an engineer by installing botched homebrew software in June, then infiltrated another employee computer through a fraudulent recruitment interview and malicious coding assignment in September. On October 20, they exploited a compromised internal AI tool to access additional engineers' devices and steal credentials, before deploying a malicious container in the signing infrastructure of a Binance wallet on October 29. The hackers then exploited the sites' EIP-7702 authorization mechanism to divert funds outside of normal withdrawal controls. The FBI attributed the attack to North Korea's TraderBog hacking operation. As of November 3, Binance reported that approximately $2.85 billion had been frozen or seized, while 98% of affected customer assets had been restored using the company's resources. Binance rebuilt compromised systems, strengthened security controls and commissioned an independent cybersecurity review. North Korea denied responsibility for the attack.