The attackers behind the theft of approximately $6.3 billion from Binance reportedly gained access to the exchange’s systems by June 2026, around eight weeks before the attack. On October 29, 2026, they drained hot wallets in roughly 20 minutes, moving funds across more than ten blockchains, including Ethereum, Bitcoin and Solana. Their intrusion reportedly relied on a multi-layered social engineering campaign involving fake job interviews and tampered development tools, without compromising private keys. Binance suspended withdrawals and later allocated about $6.34 billion from its corporate resources, while partners and stablecoin issuers froze or intercepted $2.85 billion to $3 billion of the stolen assets. The breach was attributed to TraderTraitor, a North Korean state-sponsored hacking group also linked to the $1.5 billion theft from Bybit in February 2025.
Source: Read the original article
