Binance Says Hackers Used Fake Job Interviews, AI Tool to Steal $6.3 Billion In Crypto

November 3, 2026

Binance says hackers spent months infiltrating its systems through fake job interviews, a tampered developer tool and compromised internal AI tools before stealing $6.34 billion in crypto in the Oct. 29 attack. Co-CEO Richard Teng said Binance has replenished 98% of the affected assets, and that it is still in the process of purchasing outstanding, more illiquid assets. CNBC reports: Preparations for the attack began in June, when a Binance Wallet DevOps engineer downloaded a tampered Homebrew installation “to install a popular AI coding tool after searching for it on a search engine,” according to a security report published by Binance Tuesday. It said it detected the suspicious activity, replaced the engineer’s device and rotated credentials as a precaution, but that by then the employee’s “role and his related colleagues on our wallet infrastructure team was exposed to the hacker.”

[…] As of Tuesday Binance has rebuilt the affected wallet system and internal AI tool, replaced compromised devices, decommissioned credentials and tokens associated with the affected engineers and expanded security scans across employee devices, Teng told “Squawk on the Street.”

“We’re also getting an independent expert to review everything that we have done, and we’ll keep strengthening our defenses as the investigation continues,” Teng said. “We’re working around the clock with law enforcement agencies and with industry partners to trace and freeze the stolen funds for that front.”