Binance has disclosed how attackers carried out a theft its reporting puts at $6.43 billion, a breach that began with fake job interviews, moved through a trojanized Homebrew installer, and reached the exchange's wallet signing service.
Binance · Reported crypto theft
A fake hiring process led to a $6.43 billion theft from the exchange's signing layer
Binance's disclosure describes an attack that began with fake job interviews, moved through a trojanized Homebrew installer and an internal AI tool, and reached the wallet signing service that authorizes asset transfers.
$6.43B
Reported loss, per Binance's disclosure. Not independently verified.
3
Distinct attack stages: social engineering, supply-chain tampering, and an internal AI tool.
1
Critical layer reached: the wallet signing service that authorizes outbound transfers.
Attack path
How the intrusion reportedly moved through the system
STEP 1
Fake job interviews
Attackers posed as recruiters to reach engineers.
→
STEP 2
Trojanized Homebrew
A legitimate installer was altered to deliver malicious code.
→
STEP 3
Internal AI tool
Reported as abused; the specific misuse is not detailed.
→
STEP 4
Wallet signing service
Access to authorize transfers out of exchange wallets.
Why the signing layer matters
Access to signing can let unauthorized transfers proceed even when other safeguards exist elsewhere.
Signing services authorize movement of digital assets out of exchange-controlled wallets.
Hiring pipelines and developer tooling sit outside traditional perimeter defenses.
AI tools wired into workflows can become new routes when permissions and outputs are loosely controlled.
What the disclosure signals
Social engineering and supply-chain tampering can converge on core infrastructure.
Security teams are treating AI integrations as part of the attack surface.
The case is one of the largest reported crypto thefts on record.
Open questions
The $6.43 billion figure has no independent verification yet.
No intrusion timeline has been published.
How much value was recovered or frozen is unconfirmed.
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...