Binance hack of $6.3 billion via fake job interview

Binance disclosed that hackers posing as recruiters compromised two software engineers between June and September 2026, then used a third engineer’s computer to steal $6.3 billion of crypto on 29 October 2026. The theft moved 233.46 million XRP and other tokens, prompting the exchange to freeze about $2.85 billion of assets and to begin repaying affected customers. The FBI attributed the attack to a North Korean hacking unit, which the North Korean government denied.

Binance’s repayment and the freezing of $2.85 billion affect liquidity for XRP and other digital assets, while the still‑unrecovered $3.24 billion of funds could pressure crypto markets if liquidated. The incident also highlights recruitment‑based cyber‑risk for crypto firms, prompting tighter security spending.

  • 1The hack resulted in a $6.3 billion theft of cryptocurrency.
  • 2233.46 million XRP tokens were transferred out of hot wallets in four minutes.
  • 3Binance froze or intercepted about $2.85 billion of the stolen assets.
  • 4The unauthorized transfers began on 29 October 2026 and the final transfer occurred just before midnight UTC the same day.
  • 5The FBI blamed a North Korean hacking unit, which North Korea denied involvement.
  • 6Binance said it has repaid 98% of the affected tokens and is working to reimburse customers.

Sources