Binance investigates potential security breach involving crypto assets
Binance
Binance announced it is investigating a potential major security breach involving digital assets. The exchange is reviewing the incident to determine the scope and impact.
why this severityConfirmed security incident investigation at a major cryptocurrency exchange.
- first report
- 29 Oct 2026
- last update
- 12 Nov 2026
Timeline · 11
- 29 Oct 2026Binance probes potential $5.8 billion crypto-theft hack
- 30 Oct 2026Breach updated to affect 6.3 billion in assets with nearly 3 billion frozen
- 30 Oct 2026Attribution points to North Korea for the $6.3 billion crypto heist
- 30 Oct 2026Investigation reveals the breach originated from a compromised DevOps engineer laptop
- 1 Nov 2026FBI officially attributes the record $6.43 billion Binance heist to North Korea's TraderTraitor group
- 2 Nov 2026FBI flags over 600 crypto addresses tied to the heist as laundering continues
- 3 Nov 2026Investigation details reveal the multi-stage campaign involved fake job interviews, recruitment-themed social engineering, and a tampered Homebrew installation.
- 4 Nov 2026Binance incident report reveals the massive heist stemmed from a months-long campaign compromising three engineers computers
- 4 Nov 2026Binance incident report confirms the multi-stage attack compromised three engineers computers through fake recruitment interviews and malicious installers
- 9 Nov 2026Binance denies claims of a new security breach made by the ShinyHunters threat actor
- 12 Nov 2026Law enforcement seized 1.2 billion in stolen assets linked to the North Korea operations.
Sources · 19
News and write-ups
- 2026-10-29Binance probes potential $5.8 billion crypto-theft hackBleepingComputer · bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-th
- 2026-10-30Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion FrozenThe Hacker News · thehackernews.com/2026/10/binance-suffers-security-breach.html
- 2026-10-30Binance links $6.3 billion crypto theft to compromised DevOps laptopBleepingComputer · bleepingcomputer.com/news/security/binance-links-63-billion-crypto-theft-to-comp
- 2026-10-30Binance hit by record $6.3 billion crypto hack, scrambles to freeze fundsThe Record · therecord.media/binance-hit-by-record-6-billion-crypto-hack
- 2026-10-30Binance hit by $6.3 billion theft in what could be the biggest crypto heist on recordHelp Net Security · helpnetsecurity.com/2026/10/30/binance-crypto-hack
- 2026-10-30$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitorSecurityWeek · securityweek.com/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertr
- 2026-11-01FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto HeistThe Hacker News · thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html
- 2026-11-02FBI Flags Over 600 Addresses Tied to North Korea’s Binance HeistSecurityWeek · securityweek.com/fbi-flags-over-600-addresses-tied-to-north-koreas-binance-heist
- 2026-11-02FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactionsThe Record · therecord.media/fbi-blames-tradertraitor-for-binance-hack
- 2026-11-02FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious usersHelp Net Security · helpnetsecurity.com/2026/11/02/fbi-north-korea-binance-hack
- 2026-11-02One Compromised Laptop, Billions Lost: The Binance Attack-Path WarningDark Reading · darkreading.com/cyberattacks-data-breaches/binance-hack-test-attack-paths
- 2026-11-03Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion TheftThe Hacker News · thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html
- 2026-11-03Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibilityThe Record · therecord.media/binance-cryptocurrency-theft-months-long-campaign-nkorea
- 2026-11-03Binance says fake job interview led to $6.3 billion crypto heistBleepingComputer · bleepingcomputer.com/news/security/binance-says-fake-job-interview-led-to-63-bil
- 2026-11-04Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance HeistSecurityWeek · securityweek.com/rigged-coding-assignment-abused-ai-tool-opened-path-to-6-billio
- 2026-11-04Fake job interview opened the door to $6.34 billion Binance heistHelp Net Security · helpnetsecurity.com/2026/11/04/binance-hack-north-korea-fake-job-interview
- 2026-11-06After Binance, check what your signing systems can approveTrail of Bits · blog.trailofbits.com/2026/11/06/after-binance-check-what-your-signing-systems-ca
- 2026-11-09Binance denies data breach after alleged ShinyHunters claimsBleepingComputer · bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shin
- 2026-11-12Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ toolsThe Record · therecord.media/stolen-binance-crypto-recovered-doj-facestealer-disrupted
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- No AI role
- categories
- General security
- severity
- 3 · Confirmed exploitation
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 29 Oct 2026 · first reported 29 Oct 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-10-29 23:23Z · updated 2026-11-12 22:11Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Binance investigates potential security breach involving crypto assets https://gcdradar.vercel.app/incidents/binance-investigates-potential-security-breach-involving-cry · AIR-2026-1658 · live - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation): Confirmed security incident investigation at a major cryptocurrency exchange. - Fix status: No fix needed - First reported: 2026-10-29 - AI role: No AI role - Products: Binance ## Summary Binance announced it is investigating a potential major security breach involving digital assets. The exchange is reviewing the incident to determine the scope and impact. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-12: Law enforcement seized 1.2 billion in stolen assets linked to the North Korea operations. (https://therecord.media/stolen-binance-crypto-recovered-doj-facestealer-disrupted) - 2026-11-09: Binance denies claims of a new security breach made by the ShinyHunters threat actor (https://bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shinyhunters-claims) - 2026-11-04: Binance incident report confirms the multi-stage attack compromised three engineers computers through fake recruitment interviews and malicious installers (https://helpnetsecurity.com/2026/11/04/binance-hack-north-korea-fake-job-interview) - 2026-11-04: Binance incident report reveals the massive heist stemmed from a months-long campaign compromising three engineers computers (https://securityweek.com/rigged-coding-assignment-abused-ai-tool-opened-path-to-6-billion-binance-heist) - 2026-11-03: Investigation details reveal the multi-stage campaign involved fake job interviews, recruitment-themed social engineering, and a tampered Homebrew installation. (https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html) ## Sources - 2026-10-29 BleepingComputer: Binance probes potential $5.8 billion crypto-theft hack https://bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-theft-hack - 2026-10-30 The Hacker News: Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen https://thehackernews.com/2026/10/binance-suffers-security-breach.html - 2026-10-30 BleepingComputer: Binance links $6.3 billion crypto theft to compromised DevOps laptop https://bleepingcomputer.com/news/security/binance-links-63-billion-crypto-theft-to-compromised-devops-laptop - 2026-10-30 The Record: Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds https://therecord.media/binance-hit-by-record-6-billion-crypto-hack - 2026-10-30 Help Net Security: Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record https://helpnetsecurity.com/2026/10/30/binance-crypto-hack - 2026-10-30 SecurityWeek: $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor https://securityweek.com/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertraitor - 2026-11-01 The Hacker News: FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist https://thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html - 2026-11-02 SecurityWeek: FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist https://securityweek.com/fbi-flags-over-600-addresses-tied-to-north-koreas-binance-heist - 2026-11-02 The Record: FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactions https://therecord.media/fbi-blames-tradertraitor-for-binance-hack - 2026-11-02 Help Net Security: FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users https://helpnetsecurity.com/2026/11/02/fbi-north-korea-binance-hack - 2026-11-02 Dark Reading: One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning https://darkreading.com/cyberattacks-data-breaches/binance-hack-test-attack-paths - 2026-11-03 The Hacker News: Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html - 2026-11-03 The Record: Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibility https://therecord.media/binance-cryptocurrency-theft-months-long-campaign-nkorea - 2026-11-03 BleepingComputer: Binance says fake job interview led to $6.3 billion crypto heist https://bleepingcomputer.com/news/security/binance-says-fake-job-interview-led-to-63-billion-crypto-heist - 2026-11-04 SecurityWeek: Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist https://securityweek.com/rigged-coding-assignment-abused-ai-tool-opened-path-to-6-billion-binance-heist - 2026-11-04 Help Net Security: Fake job interview opened the door to $6.34 billion Binance heist https://helpnetsecurity.com/2026/11/04/binance-hack-north-korea-fake-job-interview - 2026-11-06 Trail of Bits: After Binance, check what your signing systems can approve https://blog.trailofbits.com/2026/11/06/after-binance-check-what-your-signing-systems-can-approve - 2026-11-09 BleepingComputer: Binance denies data breach after alleged ShinyHunters claims https://bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shinyhunters-claims - 2026-11-12 The Record: Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools https://therecord.media/stolen-binance-crypto-recovered-doj-facestealer-disrupted Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveBinance US seizes North Korean hacking infrastructure linked to Binance theft
Breaches & attacks · Real loss · since 13 Nov 2026
- liveDixell refrigeration units Multiple vulnerabilities discovered in Dixell refrigeration units
Patch now · Exploited · since 13 Nov 2026
- live8.6UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability
Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713
- liveCity of Osaka municipal systems City of Osaka suffers data breach impacting one million residents
Breaches & attacks · Real loss · since 13 Nov 2026
- liveUniversity of Texas at Arlington discloses data breach from cyberattack
Breaches & attacks · Exploited · since 13 Nov 2026
- livePDF viewers Genuine PDF Forgeries: Attacking Signature Verification via Human Factors
Research · since 13 Nov 2026