Binance Reveals Details of $6.34 Billion Hack - Attack Started With Fake Interview Binance released preliminary results of its investigation into the attack on October 29. According to the exchange, the attackers gained access to the internal transaction signature service, which allowed them to withdraw funds while bypassing the normal withdrawal procedure. In September, one of the Binance developers received a job offer. He underwent a video interview with an alleged human resources expert, and then received a test assignment from a representative of a fictitious company. The downloaded repository contained malicious code that ran on the work computer. On October 20, attackers used an infected computer and Binance's internal AI tool to gain access to other employees. Later they discovered a token with the rights to deploy containers and arrived at the crypto wallet infrastructure. On October 29, attackers began pulling assets on multiple networks simultaneously. Among the stolen items were 18,270 BTC, 233.46 million XRP, approximately 970,500 SOL and 44.2 million OP. Ethereum also used the EIP-7702 mechanism, which allowed funds to continue moving even after withdrawals were suspended. Of the $6.34 billion in affected assets, Binance was able to freeze or intercept approximately $2.85 billion. The exchange promises to fully cover the users' losses. As of October 31st, 98% of the affected tokens have already been regenerated.

Binance Reveals Details of $6.34 Billion Hack - Attack Started With Fake Interview Binance released preliminary results of its investigation into the attack on October 29. According to the exchange, the attackers gained access to the internal transaction signature service, which allowed them to withdraw funds while bypassing the normal withdrawal procedure. In September, one of the Binance developers received a job offer. He underwent a video interview with an alleged human resources expert, and then received a test assignment from a representative of a fictitious company. The downloaded repository contained malicious code that ran on the work computer. On October 20, attackers used an infected computer and Binance's internal AI tool to gain access to other employees. Later they discovered a token with the rights to deploy containers and arrived at the crypto wallet infrastructure. On October 29, attackers began pulling assets on multiple networks simultaneously. Among the stolen items were 18,270 BTC, 233.46 million XRP, approximately 970,500 SOL and 44.2 million OP. Ethereum also used the EIP-7702 mechanism, which allowed funds to continue moving even after withdrawals were suspended. Of the $6.34 billion in affected assets, Binance was able to freeze or intercept approximately $2.85 billion. The exchange promises to fully cover the users' losses. As of October 31st, 98% of the affected tokens have already been regenerated.