Binance Details $6.34B Hack: Fake Job Interviews Used to Deploy Malware, Internal AI Tool Exploited Binance released an initial report on its hack on October 29, revealing that attackers used fake job interviews and malware to compromise engineers' devices in September. They later exploited an internal AI tool to gain access to wallet engineers, then used stolen credentials to compromise a wallet signing service and abuse websites' EIP-7702 authorization mechanism. Binance said withdrawal suspensions alone could not stop the malicious network permissions, which required a separate revocation process. Of the $6.34 billion in affected assets, approximately $2.85 billion have been frozen or seized. Binance said 98% of affected token assets had recovered as of October 31, with enough funds set aside to cover all losses. The investigation is still ongoing. - Link.

Binance Details $6.34B Hack: Fake Job Interviews Used to Deploy Malware, Internal AI Tool Exploited Binance released an initial report on its hack on October 29, revealing that attackers used fake job interviews and malware to compromise engineers' devices in September. They later exploited an internal AI tool to gain access to wallet engineers, then used stolen credentials to compromise a wallet signing service and abuse websites' EIP-7702 authorization mechanism. Binance said withdrawal suspensions alone could not stop the malicious network permissions, which required a separate revocation process. Of the $6.34 billion in affected assets, approximately $2.85 billion have been frozen or seized. Binance said 98% of affected token assets had recovered as of October 31, with enough funds set aside to cover all losses. The investigation is still ongoing. - Link.