Binance's $6.34B theft began with an engineer downloading a malicious AI coding tool
Scobleizer · x · 2026-11-08
New reporting (Nov 3) reveals the months-long operation behind the $6.34B theft from Binance targeted employees running wallet infrastructure. The first compromise came in June, when a Binance engineer searching for an AI coding tool downloaded a malicious software package. The company swapped the machine and rotated credentials, but attackers had already mapped which staff managed the crypto systems, using that to push deeper. A cautionary tale on supply-chain compromise via developer tooling.
Related event: $6.3B Binance Hack Tied to AI-Assisted Coding Risks(2 posts)→
More from coding & agent
- Qwen Code Desktop v0.27.0 ships 21-contributor batch of fixes and perf tweaks — github-actions[bot] · 2026-11-08
- One prompt, $17.57, 182 minutes: Claude autonomously simulates and rides a lightning bolt — TAbrodi · 2026-11-08
- 1,400 Claude Code sessions suggest Opus 5.5's reasoning shifted abruptly on Nov 3 — churchkey · 2026-11-08
- Claude's 'this will take months' estimates may be right, given the code bloat it produces — itigges22 · 2026-11-08
- Redditor builds a playable pixel world inside ChatGPT's page with a 37k-line userscript — ehtio · 2026-11-08
- "Your agent's favorite sandbox": a meme nails how to market Exo's hidden per-minute VMs — dbreunig · 2026-11-08