Binance co-CEO Richard Teng revealed that a sophisticated, multi-month operation led to a staggering loss of over 6 billion dollars in digital assets during a record-breaking cyberattack on October 29. In an interview with CNBC, Teng explained that the breach was not the result of a single mistake but rather a calculated campaign where hackers spent months infiltrating the company’s systems. The attackers utilized high-pressure social engineering tactics, including posing as recruiters to lure employees into fake job interviews that featured malware-laden coding exercises designed specifically to bypass corporate security measures.
The infiltration began as early as June when a DevOps engineer accidentally installed a tampered version of a developer tool while trying to download an AI coding assistant. Although Binance initially attempted to contain the threat by replacing hardware and rotating credentials, the hackers had already mapped out the roles of key personnel within the wallet infrastructure team. This foothold allowed them to pivot through internal AI tools and eventually gain authorization over the systems responsible for processing wallet transactions.
Despite the scale of the theft, Binance reports that it has already replenished roughly 98 percent of the 6.34 billion dollars in affected assets using its own reserves. While some funds remain difficult to recover due to their illiquidity or laundering efforts, several industry giants including Tether and Ripple have helped freeze approximately 3 billion dollars in stolen capital. Though federal investigators have linked the heist to North Korean actors known as TraderTraitor, Teng refrained from making definitive attributions himself.
To prevent future breaches, Binance has completely rebuilt its affected wallet systems and internal AI tools while implementing stricter security scans across all employee devices. An independent expert has been brought in to audit these changes as part of a broader effort to restore investor confidence in centralized exchanges. For now, the company remains focused on collaborating with global law enforcement agencies to track down any remaining missing funds moving through various blockchain channels.
The infiltration began as early as June when a DevOps engineer accidentally installed a tampered version of a developer tool while trying to download an AI coding assistant. Although Binance initially attempted to contain the threat by replacing hardware and rotating credentials, the hackers had already mapped out the roles of key personnel within the wallet infrastructure team. This foothold allowed them to pivot through internal AI tools and eventually gain authorization over the systems responsible for processing wallet transactions.
Despite the scale of the theft, Binance reports that it has already replenished roughly 98 percent of the 6.34 billion dollars in affected assets using its own reserves. While some funds remain difficult to recover due to their illiquidity or laundering efforts, several industry giants including Tether and Ripple have helped freeze approximately 3 billion dollars in stolen capital. Though federal investigators have linked the heist to North Korean actors known as TraderTraitor, Teng refrained from making definitive attributions himself.
To prevent future breaches, Binance has completely rebuilt its affected wallet systems and internal AI tools while implementing stricter security scans across all employee devices. An independent expert has been brought in to audit these changes as part of a broader effort to restore investor confidence in centralized exchanges. For now, the company remains focused on collaborating with global law enforcement agencies to track down any remaining missing funds moving through various blockchain channels.
