Binance says hackers carried out a $6.3 billion cryptocurrency theft by compromising employees through a fake job interview, malicious software hidden in an advertisement, and subsequent internal access. The exchange says the scheme began in June and involved breaching multiple people inside its environment, culminating in withdrawals being drained on Thursday.
Binance also says it freezes withdrawals after detecting the attack late on Thursday and that some crypto was still taken for several hours afterwards. The exchange says it will repay affected customers whose funds were stolen, and it discusses broader security concerns about how attackers reached a major target after prior North Korea-linked hacking activity.
Outlets vary in emphasis. The Korea Times frames the method as a “fake job interview” used in a multi-stage intrusion. Japan Times highlights Binance’s financial responsibility and how long withdrawals were paused. The Verge focuses on Binance’s account that the attackers combined multiple known techniques over months, citing additional detail from Binance’s postmortem.
All sources rely on Binance’s initial reporting; the FBI’s attribution and North Korea’s denial are mentioned only in the Korea Times summary.