Binance Reveals How Hackers Pulled Off Record $6.3 Billion Crypto Theft

Binance, the world’s largest cryptocurrency exchange, has provided new details about the record-breaking $6.3 billion cyber heist that shocked the financial world last week. According to an assessment released by the company, the attack was not a sudden event, but a carefully planned operation that took months to prepare. The FBI has identified the group responsible as a North Korean military hacking unit known as “TraderTraitor.”

In a report shared on Tuesday, Binance explained that the hackers used highly deceptive methods to gain access to their internal systems. In September, a Binance engineer was contacted on a job-hunting platform by someone pretending to be a director at a fake company. The hackers spent weeks building trust with the employee, even sharing photos and videos to appear legitimate. Eventually, they invited the engineer to a second interview on a chat app, where they asked him to download an “assignment.” This file contained malicious code that allowed the attackers to enter the company’s network.

This was not the hackers' first attempt. According to The Verge, Binance security teams had detected an earlier, smaller attack in June. Although the company replaced the affected worker’s device at that time, the hackers had already learned valuable information about how the exchange operated. By October, the attackers were able to use an internal AI tool at Binance to take control of digital wallets. Once they gained this access, they moved quickly, launching the final attack that resulted in the massive loss of funds.

Binance CEO Richard Teng stated that the company has worked hard to fix the damage. The exchange reported that it has already replaced 98% of the stolen assets using its own money. “At this moment, 98% of impacted tokens had been replenished; we’re completing the remaining 2%,” Teng wrote. Withdrawals for customers have now broadly resumed. The company has also promised to conduct an independent cybersecurity review to strengthen its defenses and ensure such a breach does not happen again.

Despite these efforts, the incident has caused significant concern among users and the wider financial industry. The Guardian Technology reports that Binance faced a difficult situation as scared customers rushed to withdraw their money. Over a single weekend, the exchange processed billions in withdrawals, though it maintained that user funds were safe. The company has also warned users to be careful of scammers who are trying to take advantage of the situation by offering fake compensation schemes.

This heist highlights a growing problem in the digital age: the risk of sophisticated “social engineering.” This is a method where hackers use human psychology—like the desire for a new job—to trick people into breaking security rules. As NPR News noted, the hackers’ approach was more advanced than anything previously seen, making it very difficult for the employee to realize they were being targeted.

For many crypto users, the event serves as a sharp reminder of the risks involved in digital finance. Unlike traditional bank accounts in countries like the US, UK, or Australia, crypto assets are often not protected by government insurance. This means that if an exchange goes bankrupt or fails to cover losses, users might not get their money back. While Binance has pledged to absorb the financial impact, the event has led to a drop in confidence, with some investors pulling money out of Bitcoin-related products in the US.

Moving forward, Binance faces the challenge of rebuilding its reputation. The company was already working to improve its image following legal issues in 2023, and this massive theft has made that task much harder. As the company works to restore full operations, the focus remains on security. The exchange has admitted that the attack “should not have happened” and apologized for the uncertainty caused to its users. For now, the industry is watching closely to see if Binance can truly secure its platform against such determined and clever attackers in the future.