North Korea stole $6.3B from Binance via fake job interview that compromised engineers
aakashgupta · x · 2026-11-04
Binance disclosed a major breach: North Korean hackers used a fake job interview campaign to compromise its wallet team and siphon roughly $6.3 billion in crypto over five months and two separate attacks.
The chain:
- June: a wallet-team engineer installed a tampered Homebrew package while looking for an AI tool. Binance caught it, swapped the laptop and reset passwords — but attackers had already mapped the team and each member's role.
- September: a different engineer was approached on a real job site by a "project director," passed a video interview with a fake HR person backed by a legit-looking social account full of personal photos, then interviewed with the "CEO," who led him to install malware that gave access to internal crypto wallets.
Notably, the victim didn't even have direct access to the funds — highlighting how mature supply-chain poisoning and recruitment-based social engineering against AI/crypto workers have become.
More from Fun
- Founder gave his AI his inbox to raise $10M; first tweet hit 100K views — LinusEkenstam · 2026-11-04
- Reddit user claims Codex gets 'dumbed down' right before each OpenAI release — blackcid6 · 2026-11-04
- Waymo's expanded LA service area reaches SpaceX HQ for the first time, $67.15 ride — reed · 2026-11-04
- Karpathy Boosts Open Hacker News Dataset: 10M+ Posts Usable as a Personal Knowledge Base — huangyun_122 · 2026-11-04
- Agent silently completed only a quarter of a 200-module build and stalled waiting for confirmation — Promptmethus · 2026-11-04
- Von Neumann meme: "You don't have to be responsible for the world that you're in" — akbirthko · 2026-11-04