It Turns Out Binance's $6 Billion Hack Happened Because Its Employees Were Vibe Coding
Key Points:
- Hackers stole nearly $6.3 billion from Binance through a months-long, sophisticated scheme involving sham job interviews, phishing, and hijacking an AI tool.
- The breach began when a Binance employee inadvertently downloaded a tampered installation of the Homebrew software after clicking a malicious ad, exposing the wallet development team to the attackers.
- Attackers used advanced social engineering tactics, including fake interviews conducted over text with fabricated personal profiles, to gain the trust of a software engineer and deliver malicious code.
- The compromised employee’s machine was then used to exploit an internal AI tool, allowing hackers to control multiple computers and execute a large-scale crypto theft involving XRP and Bitcoin.
- The FBI suspects a North Korean hacking group, though Pyongyang denies involvement; Binance noted it had previously thwarted numerous North Korea-linked cyber threats before this major breach.