Binance's $6.3 billion hack began with a fake job interview, exchange says

From the source

North Korea-linked attackers spent months compromising Binance employees and internal systems before exploiting its hot-wallet signing infrastructure through Ethereum's EIP-7702 mechanism. Binance’s $6.3 billion hack began with a fake job interview, the exchange said Tuesday in a media briefing, describing a months-long campaign by North Korea-linked attackers to infiltrate the exchange and carry out the biggest heist in crypto history. Binance’s Richard Teng told reporters the attack “was a campaign, built over many months” and said the FBI has attributed it to North Korea. Jimmy Su, Binance’s chief security officer, said a software engineer was contacted in September through a legitimate job platform by someone posing as a project director. A fake HR representative interviewed him by video and shared a social media account with personal photos to build trust. A second interview, with a purported CEO, ended with the engineer being told to download a coding assignment onto his work…

BestAIBroker analysis

• Finance-aware sentiment: slightly negative (-0.20 on a -1 to +1 scale).
• Event classification: OTHER.
• Market importance score: 29/100, weighting entity relevance, source credibility, multi-outlet coverage and recency.