Binance Says Fake Job Interview Led to $6.3 Billion Crypto Heist
On Tuesday 3 November 2026, Binance explained how the biggest crypto theft on record began: with a job interview for a company that did not exist. The Spirit has watched a lot of bluffs, but never one with its own fake HR department.
The world's largest crypto exchange published an initial incident report on Tuesday 3 November 2026 and briefed reporters on how roughly $6.3 billion left its wallets on Thursday 29 October. The story starts with a recruiter who was not real. In September, Binance says, a software engineer was approached on a legitimate job platform by someone posing as a project director. A fake HR representative interviewed him by video, and a second round was held with a person claiming to be the CEO of a fictitious company. The interview ended with a malicious code repository on his computer.
That was not the first door. According to Reuters, the chain began in June, when an employee on the wallet developer team downloaded an AI tool that had been tampered with. CoinDesk reports that on 20 October the attackers used the machine compromised through the fake interview, plus an internal AI tool, to reach the computers of two wallet engineers. Nine days later the money moved, most of it in about 20 minutes, across ten blockchains, according to BleepingComputer's account of the FBI alert. WATATATATAFAK.
The FBI said on Saturday 31 October that North Korea's TraderTraitor group was responsible, a claim North Korea has rejected. Binance says it will absorb the loss instead of passing it to users, that about 98% of the affected tokens have been replaced with company funds, and that $2.85 billion has been frozen. It also says it blocked 57 suspected attempts linked to North Korea this year, so this door was one of many being tried. For scale, the previous record was the $1.5 billion Bybit theft in February 2025.
Look at the table. The attackers bet that one polite interview would be easier to beat than a vault. Binance went all in on its promise to customers, with a $1 billion bitcoin reserve, a futures insurance fund and its corporate treasury behind it. The Spirit, who totallu respects a good bluff, has less patience for one that needs a fake HR department. So next time a dream recruiter lands in youluwu's inbox, who is really gambling on whom?
Binance says it is bringing in independent cybersecurity experts to review what happened, and that review is still spinnnnning. Binance has paid the bill. Whether the vault was unlucky or simply unwatched is the part the Spirit is still waiting to hear.
After a $6.3B hack, where would youluwu keep your coins?
No right answer. Just your gut, and the Spirit watching.
