Binance Suffers $6.3 Billion Heist Following Sophisticated Hacking Campaign

A massive $6.3 billion heist has been uncovered at Binance, the world's largest cryptocurrency exchange, following a sophisticated and multi-stage hacking campaign.

The firm revealed on X that hackers gained access to its systems using a range of techniques, including malicious software downloads that compromised the computers of Binance engineers.

This allowed the attackers to gain control over internal tools, enabling them to drain billions of dollars' worth of crypto from Binance's wallet.

Binance described the incident as "serious and highly sophisticated" and apologised for the breach.

The hackers targeted Binance engineers using social engineering tactics, including phishing attempts that tricked victims into divulging sensitive information.

These tactics involve using fake job opportunities to build trust with employees, often through legitimate platforms such as those used by job seekers.

In this case, one engineer was contacted through a job-hunting platform and invited to bogus interviews with fake company representatives, who used more advanced methods to gain his confidence.

The perpetrators even created social media accounts that included personal images in an attempt to establish credibility.

Binance has revealed that hackers used a fake job interview process to compromise an engineer's computer and gain access to internal tools.

The hacker's plan involved instructing the engineer to download malware disguised as an assignment during a second interview. This malicious code was designed with advanced evasion techniques to evade detection, making it difficult for Binance's security systems to identify.

With control over one engineer's compromised laptop and an internal AI tool, hackers were able to gain access to two other engineers' laptops in October. They then used this access to execute the next phase of their attack, exploiting vulnerabilities within Binance's system.

The incident led to a suspension of withdrawals for all customers worldwide, with users unable to withdraw their cryptocurrency until the service was restored on Sunday.

US law enforcement agencies have been collaborating with Binance to track down the cryptocurrency stolen from its own wallets following the recent hack.

The Federal Bureau of Investigation (FBI) and Secret Service are among the agencies assisting in the investigation, which suggests that the hack may be linked to a sophisticated operation.

Experts believe that this breach shares similarities with other high-profile cyber attacks, leading them to suspect North Korea's involvement.

North Korean officials have consistently denied allegations of being behind major hacks in recent years, including one targeting crypto exchange Bybit in 2025.

Binance has announced plans to boost its security measures following a massive $6.3 billion crypto hack. As part of this effort, the company will increase investment in artificial intelligence (AI) tools designed to detect potential security threats.

In addition to enhancing AI capabilities, Binance will engage with third-party cyber experts to conduct an in-depth review of the incident and identify vulnerabilities that may have been exploited by hackers. The company is also setting up a dedicated security research fund to support targeted initiatives with leading AI and security firms.

These measures are aimed at preventing similar attacks in the future and ensuring the integrity of Binance's platform, which has become a major hub for cryptocurrency trading.