Binance’s $6.34B hack began with fake interviews and an AI tool exploit

Fake job interviews and an exploited internal AI tool preceded Binance’s $6.34 billion hack on October 29, 2026, the exchange’s initial report shows. Attackers reached a wallet signing service, and suspending withdrawals alone was not enough to stop their malicious on-chain authorizations. The compromise began in September, when attackers used bogus job interviews to plant malware on an engineer’s device . They later exploited an internal AI tool to reach wallet engineers, then used stolen credentials to compromise the service responsible for signing wallet transactions. Binance said the attackers abused Ethereum’s EIP-7702 authorization mechanism . The malicious authorizations required a separate revocation process to block unauthorized transactions: halting withdrawals did not, by itself, disable them.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to The Cryptonomist.