Technology · Developing story
Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist
NewsAgo briefing
The clear picture
What happened
Binance says a $6.3 billion cryptocurrency theft involved fake job interviews, malware delivered through a search advertisement and use of one of its internal AI tools. BBC News says an engineer was approached on a legitimate job-hunting platform and invited to interviews with people posing as company representatives.
Latest development
Binance has publicly described the alleged attack path, adding the recruitment scam, search-ad malware and internal AI-tool elements to the account of the $6.3 billion theft.
Why it matters
Binance said customers made $7.42 billion in net withdrawals after the theft, an amount it described as 3% of the exchange's total holdings. The incident links those withdrawals to an intrusion Binance says began with an employee-targeted recruitment scheme.
Known / unclear
The largest crypto theft to date was pulled off by combining some well-known hacking techniques over the course of a few months, according to Binance.
The available accounts do not identify the attackers, name the internal AI tool, specify how it was used, or say whether the stolen cryptocurrency has been recovered.
NewsAgo wrote this briefing with an AI language model, using only the attributed reports listed below. Automated checks require every point to cite one of those reports and reject generic or unsupported text. How we use AI
Sources
Compiled from 3 independent publishers The Verge · BBC News · CBS News
The Verge emphasises “Binance says hackers used fake job interviews and an internal AI tool to pull off the…”; BBC News leads with “Binance says fake job interviews used as part of $6.3bn crypto hack”.
The big question
How did the fake recruitment contact and malware lead to the theft?
Binance attributes the operation to a chain involving a job-platform approach, bogus interviews, a search-ad malware delivery route and an internal AI tool, but the available accounts do not explain the technical steps between those elements and the theft.
Bottom line
Binance's stated account describes a breach route combining employee impersonation and malicious software with access to an internal tool, while the exchange also faces substantial customer withdrawals.
Explore timelines and source history
Developing story: This developing story groups reporting from 3 publishers. The timeline shows how the coverage has changed.
What the coverage shows
Three or more independent publishers are reporting this development. Wording and emphasis may differ; open the source timeline to compare their reporting.
Compare the publisher timeline ↓Story evolution
- Development updated
The largest crypto theft to date was pulled off by combining some well-known hacking techniques over the course of a few months, according to Binance.
2 sources at this update - Headline updated
The $6.3 billion crypto theft from Binance used malware served by a search ad, fake job interviews, and its own AI tool.
3 sources at this update - Headline updated
Binance said the net outflow from the cryptocurrency exchange represents just 3% of its total holdings.
2 sources at this update