Skip to content
North Korean Hackers Steal $6.34 Billion from Binance via Fake Interviews

North Korean Hackers Steal $6.34 Billion from Binance via Fake Interviews

First seen 4 Nov 2026, 00:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 00:18 UTC
  • •The hack resulted in a loss of $6.34 billion, marking it as the largest crypto heist.
  • •Attackers used social engineering tactics, including fake job interviews, to gain access.
  • •Approximately $2.85 billion of the stolen funds has been frozen by Binance.

On October 29, 2026, Binance suffered a $6.34 billion hack attributed to North Korean hackers, who utilized fake job interviews and malicious software to breach the platform. The attackers initially targeted a Binance engineer in June, tricking them into downloading malware disguised as legitimate software. By September, they approached another engineer through a job platform, building trust before deploying malware that allowed access to Binance's internal systems. The FBI has linked the attack to North Korea, which has denied the allegations. Binance has since frozen around $2.85 billion of the stolen funds and replenished 98% of the affected assets. This incident is considered the largest cryptocurrency heist to date, causing significant declines in cryptocurrency prices. The attack's sophistication involved using an internal AI tool to control software used by other engineers before executing the malicious code.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5h ago How this analysis works

Timeline

2026-06-01
Initial targeting of Binance engineer
Hackers tricked a Binance engineer into downloading malware disguised as legitimate software.
Gulfnews
2026-09-01
Fake job interview conducted
Another engineer was approached through a job platform, leading to the deployment of malware.
Gulfnews
2026-10-20
Internal access gained
Hackers utilized the access gained to control software used by two other engineers.
Gulfnews
2026-10-29
Major attack executed
The hackers triggered the malicious code, leading to the theft of $6.34 billion.
Gulfnews
2026-11-03
Binance releases investigation details
Binance disclosed the findings of their investigation into the hack, attributing it to North Korean hackers.
Channelnewsasia

More articles in this cluster (2)

Following this threat?

Track Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3

Common questions

How did the hackers gain access?
The hackers used social engineering tactics, including fake job interviews, to trick Binance engineers into downloading malware.
What is the current status of the stolen funds?
Approximately $2.85 billion of the stolen funds has been frozen, preventing the attackers from using it.
What should Binance users do now?
Users should monitor their accounts for unusual activity and consider withdrawing funds from the exchange if they have concerns.