Binance confirms fake-recruiter scheme led to $6.3B hack by North Korean group
Binance disclosed that North Korean hackers posed as job recruiters to contact a wallet-team engineer, then convinced them to download a malicious 'coding assignment' that bypassed the company's security tools. The initial breach let attackers pivot through an internal tool to compromise two more engineers' machines, eventually gaining access to systems controlling billions in crypto assets, resulting in a record $6.3 billion theft.