# A Binance engineer thought he was interviewing for a job. Then the hackers pounced

- URL: https://talkfuse.com/story/a-binance-engineer-thought-he-was-interviewing-for-a-job-then-the-hackers-pounced/
- Published: 2026-11-03T21:30:20+00:00
- Updated: 2026-11-03T23:44:58+00:00
- Original publisher: NPR (publisher lean: Left)
- Original article: https://www.npr.org/2026/11/03/nx-s1-6027799/binance-crypto-exchange-cyber-heist
- Topics: Asia, Business, Crypto, Cybersecurity, Politics, Software, Technology, World

## Key points

- A bogus job interview led a Binance engineer to download malware.
- Attackers moved about $6.34 billion from Binance wallets on 29 October.
- The FBI attributes the theft to North Korean hackers; Binance says it will cover users’ losses.

## Summary

A Binance software engineer was approached through a legitimate job platform in September and went through two interviews for what appeared to be a new role. According to Binance’s initial investigation, the supposed employer was fictitious. Near the end of the second interview, the engineer was asked to download a coding assignment onto his work computer. The repository contained malware that ran during setup. Binance says this was one stage of a campaign that had begun months earlier and also involved a separate compromised device and internal systems.

On 29 October, attackers moved approximately $6.34 billion in digital assets from Binance wallets, making it the largest cryptocurrency theft recorded to date. The FBI has attributed the attack to North Korean actors it calls TraderTraitor. Binance says it has set aside enough company funds to cover the loss and had replenished 98% of the affected token assets by 31 October. It also reported that about $2.85 billion had been frozen or intercepted as of 3 November, though that figure remains subject to reconciliation. Its investigation and an independent security review are continuing.

## Coverage

- [NPR: A Binance engineer thought he was interviewing for a job. Then the hackers pounced](https://www.npr.org/2026/11/03/nx-s1-6027799/binance-crypto-exchange-cyber-heist)
- [Binance: 29 October 2026 Binance Security Incident: Initial Findings and Response Update](https://www.binance.com/es/blog/community/3229153443759566763)
- [TRM Labs: North Korea Has Stolen USD 12.8 Billion in Crypto, USD 7.4 Billion of It in 2026](https://www.trmlabs.com/resources/blog/north-korea-has-stolen-usd-128-billion-in-crypto-usd-74-billion-of-it-in-2026)

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.