gcdRadar
live/Breaches & attacks/AIR-2026-1658
liveliveBreaches & attacks3 Confirmed exploitation

Binance investigates potential security breach involving crypto assets

Binance

Binance announced it is investigating a potential major security breach involving digital assets. The exchange is reviewing the incident to determine the scope and impact.

why this severityConfirmed security incident investigation at a major cryptocurrency exchange.

first report
29 Oct 2026
last update
12 Nov 2026

Timeline · 11

  1. 29 Oct 2026Binance probes potential $5.8 billion crypto-theft hack
  2. 30 Oct 2026Breach updated to affect 6.3 billion in assets with nearly 3 billion frozen
  3. 30 Oct 2026Attribution points to North Korea for the $6.3 billion crypto heist
  4. 30 Oct 2026Investigation reveals the breach originated from a compromised DevOps engineer laptop
  5. 1 Nov 2026FBI officially attributes the record $6.43 billion Binance heist to North Korea's TraderTraitor group
  6. 2 Nov 2026FBI flags over 600 crypto addresses tied to the heist as laundering continues
  7. 3 Nov 2026Investigation details reveal the multi-stage campaign involved fake job interviews, recruitment-themed social engineering, and a tampered Homebrew installation.
  8. 4 Nov 2026Binance incident report reveals the massive heist stemmed from a months-long campaign compromising three engineers computers
  9. 4 Nov 2026Binance incident report confirms the multi-stage attack compromised three engineers computers through fake recruitment interviews and malicious installers
  10. 9 Nov 2026Binance denies claims of a new security breach made by the ShinyHunters threat actor
  11. 12 Nov 2026Law enforcement seized 1.2 billion in stolen assets linked to the North Korea operations.

Sources · 19

News and write-ups

  1. 2026-10-29
    Binance probes potential $5.8 billion crypto-theft hack
    BleepingComputer · bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-th
  2. 2026-10-30
    Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
    The Hacker News · thehackernews.com/2026/10/binance-suffers-security-breach.html
  3. 2026-10-30
    Binance links $6.3 billion crypto theft to compromised DevOps laptop
    BleepingComputer · bleepingcomputer.com/news/security/binance-links-63-billion-crypto-theft-to-comp
  4. 2026-10-30
    Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds
    The Record · therecord.media/binance-hit-by-record-6-billion-crypto-hack
  5. 2026-10-30
    Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
    Help Net Security · helpnetsecurity.com/2026/10/30/binance-crypto-hack
  6. 2026-10-30
    $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
    SecurityWeek · securityweek.com/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertr
  7. 2026-11-01
    FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
    The Hacker News · thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html
  8. 2026-11-02
    FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
    SecurityWeek · securityweek.com/fbi-flags-over-600-addresses-tied-to-north-koreas-binance-heist
  9. 2026-11-02
    FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactions
    The Record · therecord.media/fbi-blames-tradertraitor-for-binance-hack
  10. 2026-11-02
    FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users
    Help Net Security · helpnetsecurity.com/2026/11/02/fbi-north-korea-binance-hack
  11. 2026-11-02
    One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning
    Dark Reading · darkreading.com/cyberattacks-data-breaches/binance-hack-test-attack-paths
  12. 2026-11-03
    Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
    The Hacker News · thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html
  13. 2026-11-03
    Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibility
    The Record · therecord.media/binance-cryptocurrency-theft-months-long-campaign-nkorea
  14. 2026-11-03
    Binance says fake job interview led to $6.3 billion crypto heist
    BleepingComputer · bleepingcomputer.com/news/security/binance-says-fake-job-interview-led-to-63-bil
  15. 2026-11-04
    Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
    SecurityWeek · securityweek.com/rigged-coding-assignment-abused-ai-tool-opened-path-to-6-billio
  16. 2026-11-04
    Fake job interview opened the door to $6.34 billion Binance heist
    Help Net Security · helpnetsecurity.com/2026/11/04/binance-hack-north-korea-fake-job-interview
  17. 2026-11-06
    After Binance, check what your signing systems can approve
    Trail of Bits · blog.trailofbits.com/2026/11/06/after-binance-check-what-your-signing-systems-ca
  18. 2026-11-09
    Binance denies data breach after alleged ShinyHunters claims
    BleepingComputer · bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shin
  19. 2026-11-12
    Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
    The Record · therecord.media/stolen-binance-crypto-recovered-doj-facestealer-disrupted

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
3 · Confirmed exploitation
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 29 Oct 2026 · first reported 29 Oct 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-10-29 23:23Z · updated 2026-11-12 22:11Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Binance investigates potential security breach involving crypto assets

https://gcdradar.vercel.app/incidents/binance-investigates-potential-security-breach-involving-cry · AIR-2026-1658 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed security incident investigation at a major cryptocurrency exchange.
- Fix status: No fix needed
- First reported: 2026-10-29
- AI role: No AI role
- Products: Binance

## Summary

Binance announced it is investigating a potential major security breach involving digital assets. The exchange is reviewing the incident to determine the scope and impact.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-12: Law enforcement seized 1.2 billion in stolen assets linked to the North Korea operations. (https://therecord.media/stolen-binance-crypto-recovered-doj-facestealer-disrupted)
- 2026-11-09: Binance denies claims of a new security breach made by the ShinyHunters threat actor (https://bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shinyhunters-claims)
- 2026-11-04: Binance incident report confirms the multi-stage attack compromised three engineers computers through fake recruitment interviews and malicious installers (https://helpnetsecurity.com/2026/11/04/binance-hack-north-korea-fake-job-interview)
- 2026-11-04: Binance incident report reveals the massive heist stemmed from a months-long campaign compromising three engineers computers (https://securityweek.com/rigged-coding-assignment-abused-ai-tool-opened-path-to-6-billion-binance-heist)
- 2026-11-03: Investigation details reveal the multi-stage campaign involved fake job interviews, recruitment-themed social engineering, and a tampered Homebrew installation. (https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html)

## Sources

- 2026-10-29 BleepingComputer: Binance probes potential $5.8 billion crypto-theft hack https://bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-theft-hack
- 2026-10-30 The Hacker News: Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen https://thehackernews.com/2026/10/binance-suffers-security-breach.html
- 2026-10-30 BleepingComputer: Binance links $6.3 billion crypto theft to compromised DevOps laptop https://bleepingcomputer.com/news/security/binance-links-63-billion-crypto-theft-to-compromised-devops-laptop
- 2026-10-30 The Record: Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds https://therecord.media/binance-hit-by-record-6-billion-crypto-hack
- 2026-10-30 Help Net Security: Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record https://helpnetsecurity.com/2026/10/30/binance-crypto-hack
- 2026-10-30 SecurityWeek: $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor https://securityweek.com/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertraitor
- 2026-11-01 The Hacker News: FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist https://thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html
- 2026-11-02 SecurityWeek: FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist https://securityweek.com/fbi-flags-over-600-addresses-tied-to-north-koreas-binance-heist
- 2026-11-02 The Record: FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactions https://therecord.media/fbi-blames-tradertraitor-for-binance-hack
- 2026-11-02 Help Net Security: FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users https://helpnetsecurity.com/2026/11/02/fbi-north-korea-binance-hack
- 2026-11-02 Dark Reading: One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning https://darkreading.com/cyberattacks-data-breaches/binance-hack-test-attack-paths
- 2026-11-03 The Hacker News: Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html
- 2026-11-03 The Record: Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibility https://therecord.media/binance-cryptocurrency-theft-months-long-campaign-nkorea
- 2026-11-03 BleepingComputer: Binance says fake job interview led to $6.3 billion crypto heist https://bleepingcomputer.com/news/security/binance-says-fake-job-interview-led-to-63-billion-crypto-heist
- 2026-11-04 SecurityWeek: Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist https://securityweek.com/rigged-coding-assignment-abused-ai-tool-opened-path-to-6-billion-binance-heist
- 2026-11-04 Help Net Security: Fake job interview opened the door to $6.34 billion Binance heist https://helpnetsecurity.com/2026/11/04/binance-hack-north-korea-fake-job-interview
- 2026-11-06 Trail of Bits: After Binance, check what your signing systems can approve https://blog.trailofbits.com/2026/11/06/after-binance-check-what-your-signing-systems-can-approve
- 2026-11-09 BleepingComputer: Binance denies data breach after alleged ShinyHunters claims https://bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shinyhunters-claims
- 2026-11-12 The Record: Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools https://therecord.media/stolen-binance-crypto-recovered-doj-facestealer-disrupted

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    Binance US seizes North Korean hacking infrastructure linked to Binance theft

    Breaches & attacks · Real loss · since 13 Nov 2026

  2. live
  3. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

  4. live
  5. live
    University of Texas at Arlington discloses data breach from cyberattack

    Breaches & attacks · Exploited · since 13 Nov 2026

  6. live