Inside the Binance hack 🕵️

Binance’s report traces the $6.4 billion hack back to a fake job interview, while Pyongyang calls the FBI’s finding a provocation.

 

📝 What you need to know

Binance has revealed how hackers pulled off last week’s record-breaking $6.3 billion heist. It started with a job interview: in September, a fake recruiter persuaded a Binance engineer to download a coding “assignment” laced with previously unknown malware. The attackers then used an internal AI tool to take over two more engineers’ computers, stole credentials to reach Binance’s wallet signing service, and exploited Ethereum’s EIP-7702 to gain partial control of a hot wallet.

It’s a familiar set of tactics employed by North Korean hackers, from fake recruiters to tampered developer tools—albeit played out on a hitherto unheard-of scale.

Pyongyang, for its part, has denied any involvement, with Kim Yo Jong calling the FBI’s finding a “grave political provocation” and hinting that the U.S. itself could be behind the theft. Binance says it has already replenished 98% of the stolen assets, while around $2.85 billion has already been frozen or intercepted with the help of law enforcement and blockchain analytics firms, said CEO Richard Teng.

đź“° In the News

Bitcoin (BTC)November 3, 2026
$77,618
â–˛ 0.3% (24h)
View live price

📊 Myriad Insight of the Day

Myriad prediction marketNovember 3, 2026
Solana's next move: Pump to $160 or dump to $40?
Resolves when SOL hits either target first
$160 46%$40 54%
  
Why it matters
Solana's slide has tipped this market: the dump to $40 now leads at 54%, the first time it's been favored since mid-September. SOL has fallen from about $102 last Wednesday to around $93, per CoinGecko, with the drop accelerating after last week's Binance hack. That leaves $40 roughly 57% away and $160 about 72% above. A week ago, with SOL near $101, the pump still led 52% to 48%.
Related: TRM and Chainalysis tie $6.4B Binance hack to North Korea's TraderTraitor
Trade on Myriad

📚 Watch & Learn

📹 WATCH: Binance Hack Details, Midterms, US Equity Perps Approved and ETF Exodus.

Interested in partnering with Decrypt? Find out more here.