One recruiter reply cost Binance $6.34B: the full June–October attack timeline
ccerrato147 · x · 2026-11-04
Binance published the complete chain of the June–October supply-chain attack: an engineer answered a recruiter, downloaded a tampered Homebrew installer, and the device compromise led to a $6.34B loss — over half of Monaco's annual GDP.
The thread breaks down each step and the security practice that would have stopped it, with a Trojan-horse illustration. Key lesson: AI dev-tool installers surfaced by search can be poisoned; tool sources must be signed and controlled.
More from coding & agent
- CoworkOS Debuts: Three-Layer Agent Coworker Framework Lifts Qwen3.6 by 9.76 Points — KyeGomezB · 2026-11-04
- Claude Code Job Search Framework Hits 69k GitHub Stars — adnan_hashmi · 2026-11-04
- DOLORES: Training-Free Meta-Scaffold Lifts 8B Models Past 32B Baselines — StellaLisy · 2026-11-04
- Berkeley-affiliated StarTrail open-sources a deep research benchmark and paper-search toolkit — CShorten30 · 2026-11-04
- DuplexAgent-RSI separates live speech from async agent work in voice assistants — jiqizhixin · 2026-11-04
- Team shares meticulous agent-driven workflow for landing open-source PRs in Turso — glcst · 2026-11-04