Technology · Malaysia Bureau
Binance reveals sophisticated hack exploiting fake job ads, AI tools
The cryptocurrency exchange has disclosed details of a major security breach involving social engineering tactics that ultimately led to the theft of digital assets worth US$6.3 billion in late October.
LSN Malaysia ·
Binance said the elaborate attack began in June when hackers posted a fraudulent job advertisement featuring a tampered coding tool, according to the exchange's security disclosure. The scheme exploited social engineering techniques to gain access to the platform's infrastructure, setting off a chain of security breaches that went undetected for months.
The initial compromise involved candidates downloading what appeared to be legitimate development software advertised through a fake recruitment campaign. This vector allowed attackers to establish a foothold within Binance's systems, from which they gradually expanded their access across multiple layers of the exchange's network.
The theft came to light on October 29 when Binance detected unusual activity and confirmed that substantial quantities of cryptocurrency had been stolen. The breach represents one of the largest cryptocurrency heists on record and highlights the evolving sophistication of attacks targeting major digital asset platforms.
Binance subsequently implemented enhanced security protocols and initiated a comprehensive investigation into the incident. The exchange has also worked with law enforcement and cybersecurity experts to trace the stolen assets and prevent further unauthorised access to user funds.