<p><a href="https://bsc.news/news/binance-hack-fake-interviews-ai-tool-xrp?utm_source=coinmarketcap&amp;utm_medium=feed" rel="noopener noreferrer nofollow">Read this article on bsc.news</a></p>
<p>Binance has published a preliminary account of how attackers breached its wallet infrastructure in the Oct. 29 incident, which it says affected about $6.34 billion in digital assets. The exchange traced the attack to fake recruitment interviews, malicious software and an internal AI tool.</p>
<p><cite>Preparations for the attack began in June, when a Binance Wallet DevOps engineer downloaded a tampered Homebrew installation to install a popular AI coding tool after searching for it online</cite>, according to a security report Binance published on Tuesday, as reported by CNBC. <cite>On Oct. 20, the attacker used the compromised computer and an internal AI tool to gain control of the wallet developer's system and that of a second wallet developer on the team</cite>, NBC News reported.</p>
<h2 id="how-the-attack-unfolded-on-oct-29">How the Attack Unfolded on Oct. 29</h2>
<p><cite>Binance's preliminary review described a multistage intrusion involving malicious software, employee devices, internal AI tools and unauthorized access to a wallet-signing service, which attackers used to initiate unauthorized transactions on Oct. 29 across several networks</cite>, TokenPost reported.</p>
<p><cite>Five Binance hot wallets sent 233.46 million XRP (<a href="https://x.com/search?q=%24XRP&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$XRP</a>) to an attacker-controlled address, while other transfers involved approximately 970,500 SOL (<a href="https://x.com/search?q=%24SOL&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$SOL</a>), 44.2 million OP (<a href="https://x.com/search?q=%24OP&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$OP</a>) and 18,270 BTC (<a href="https://x.com/search?q=%24BTC&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$BTC</a>)</cite>, according to Security Affairs. <cite>TokenPost put the XRP transfers between 4:05 and 4:09 p.m.</cite>, a window of about four minutes.</p>
<p>Binance has said the $6.34 billion figure reflects assets affected rather than a confirmed theft total. <cite>TokenPost noted the figure counts assets affected, not a confirmed theft total, and could change with further review and market-price fluctuations.</cite></p>
<h2 id="recovery-reimbursement-and-security-changes">Recovery, Reimbursement and Security Changes</h2>
<p><cite>Binance said $2.85 billion in digital assets tied to the incident had been frozen or intercepted by Nov. 3, and that it plans to hire an independent cybersecurity firm to conduct a full review.</cite><cite>The exchange said it will absorb all financial losses from stolen funds rather than pass them to users, and that 98% of affected token assets had been replenished by Oct. 31</cite>.</p>
<p>On remediation, <cite>Binance co-CEO Richard Teng said the exchange has rebuilt the affected wallet system and internal AI tool, replaced compromised devices, decommissioned credentials and tokens tied to the affected engineers, and expanded security scans across employee devices.</cite><cite>Binance is also increasing investment in AI-enabled detection and working on a security research fund and targeted initiatives with leading AI companies.</cite></p>
<p>On attribution, <cite>the FBI has blamed a North Korean hacking group, a claim North Korea has rejected</cite>, NBC News reported.</p>
<h2 id="sources">Sources</h2>
<ul>
 <li><a href="https://www.cnbc.com/2026/11/03/binance-co-ceo-teng-says-hackers-used-fake-job-interviews-to-steal-6point3-billion-in-crypto.html" rel="noopener noreferrer nofollow">CNBC: Binance co-CEO Richard Teng says hackers used fake job interviews and an AI tool</a></li>
 <li><a href="https://www.nbcnews.com/business/markets/binance-hack-fake-job-interview-heist-rcna607238" rel="noopener noreferrer nofollow">NBC News: Binance says hackers used fake job interview before $6.3 billion attack</a></li>
 <li><a href="https://www.tokenpost.com/news/technology/47954" rel="noopener noreferrer nofollow">TokenPost: Binance says $2.85 billion tied to attack was frozen or intercepted</a></li>
</ul>
<p><a href="https://bsc.news/latest-news?utm_source=coinmarketcap&amp;utm_medium=feed" rel="noopener noreferrer nofollow">See more news on bsc.news</a></p>

Binance Details $6.3 Billion Hack: Fake Job Interviews, Malware and Internal AI Tool Abuse

Table of Contents

BSCN

Other articles published on Nov 4, 2026

Join our free newsletter for daily crypto updates!