Binance details attack involving fake recruitment and internal AI tools

A fake job opportunity can become a route into a company's technical systems.

What happened

Binance has published preliminary findings on the attack behind its October breach.

The company's account describes a months-long operation involving a fraudulent recruitment process, malicious developer software and compromised internal AI tooling. It reports approximately $6.34 billion in affected assets and says an independent review will follow.

These are the company's preliminary findings, not the conclusions of a completed independent review. The new development is the disclosure of the alleged attack path.

Why it matters

The preliminary account connects recruitment, developer software and internal tools in a single attack path. That puts attention on how people and software gain access, alongside the security of the systems holding assets.

The bigger picture

An independent review could change or qualify the company's account. Until that work is complete, the alleged sequence and affected-asset figure should remain attributed to Binance, with the newly disclosed findings kept distinct from the original breach announcement.