Binance Reports Massive Crypto Hack Amid Social Engineering and Attribution Claims

Cryptocurrency exchange Binance has reported a major security breach involving an estimated $6.3bn in digital assets. According to initial findings released by the company, the attack involved a multi-stage social engineering campaign targeting a company engineer through fake job interviews.

How the Attack Unfolded

• Initial Contact: Hackers reportedly contacted a Binance engineer via a legitimate job-hunting platform.
• Malicious Payload: During a secondary interview, the engineer was instructed to download malware disguised as an assignment.
• Internal Compromise: The compromised computer and an internal AI tool were allegedly used to gain access to other engineers' laptops.

Attribution and Official Responses

• US and Security Analysts: The FBI, Secret Service, and various cyber analysts have attributed the hack to North Korea.
• Expert Analysis: Reports from TRM Labs noted similarities to previous incidents, such as a 2025 exchange breach linked to the Lazarus Group.
• North Korean Denial: Pyongyang has denied the allegations, characterizing them as a deliberate attempt to damage its public image.

Impact on Users and Platform Status

Binance stated that customer funds remain safe and that the company has committed to covering the losses. While withdrawals were temporarily paused, services were restored, and the exchange reported net outflows following the resumption of transactions. Security experts have urged users on all platforms to remain vigilant against phishing scams, fake support accounts, and unsolicited messages referencing the incident.

How to Verify

Users can review official statements directly through Binance's official communication channels and check security advisories published by recognized financial regulators and cybersecurity agencies.