# Binance details months-long North Korean cyber attack that stole $6.34bn

- URL: https://talkfuse.com/story/binance-says-malicious-code-fake-job-interview-led-to-6-3b-hack/
- Published: 2026-11-04T09:37:23+00:00
- Updated: 2026-11-04T15:54:10+00:00
- Original publisher: The Hill (publisher lean: Centre)
- Original article: https://thehill.com/policy/technology/6194069-binance-hack-north-korea-tradertraitor/
- Topics: Asia, Business, Crypto, Cybersecurity, Elections, Politics, Software, Technology, World

## Key points

- Binance says the attack took months to prepare.
- The FBI attributed the theft to North Korea.
- Binance says it will cover the losses.

## Summary

Binance said attackers spent months preparing the cyber attack that affected $6.34 billion in digital assets, using a tampered developer tool and a fake job interview to compromise employees’ computers. The exchange’s account linked the incident to the FBI’s finding that North Korea was responsible for the theft on 29 October.

In June, a wallet engineer downloaded a modified installation of an AI coding tool; in September, another engineer installed malware disguised as a job assignment. Binance said attackers later used the compromised devices and an internal AI tool to reach wallet systems and trigger the theft. Of the assets affected, $2.85 billion had been frozen; Binance said it had replenished 98 per cent of affected tokens and would cover the losses.

## Coverage

- [The Hill: Binance details months-long North Korean cyber attack that stole $6.34bn](https://thehill.com/policy/technology/6194069-binance-hack-north-korea-tradertraitor/)
- [Binance: 29 October 2026 Binance Security Incident: Initial Findings and Response Update](https://www.binance.com/en/blog/community/3229153443759566763)
- [Engadget: Binance attackers used fake job interviews to pull off $6.3 billion crypto heist](https://www.engadget.com/2306223/binance-attackers-fake-job-interviews-6-3-billion-crypto-heist/)

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.