Binance Foils 57 Suspected North Korean Cyberattacks as Hackers Target Crypto Firms

Binance identified and stopped 57 suspected North Korea-linked cyberattacks in 2026, co-founder Yi He said in a November 3 post on X. She said hackers used fake job interviews, malicious software and compromised developer tools to target cryptocurrency industry workers.

The disclosure follows Binance’s October 29 security breach involving approximately $6.34 billion in digital assets. An FBI investigation linked the attack to North Korean hackers. Binance has pledged to cover the losses without affecting customers.

Binance Details North Korea’s Hacking Tactics

Among the methods Binance identified were fake job interviews, harmful browser extensions and altered software packages. Some attackers also circulated fake video meeting apps to obtain login credentials and plant malware on victims’ devices.

Related: Europol Seizes Over 100 Servers in International Investment Scam Crackdown

Binance engineers were also targeted through bogus recruitment offers. In one reported case, an employee downloaded a coding assignment sent by an attacker. The file contained malicious software that opened access to internal systems.

Binance Strengthens Security After $6.34B Breach

Binance rebuilt affected systems, replaced compromised devices and revoked exposed credentials after the breach. It also tightened wallet controls and expanded AI-based threat detection.

By October 31, the exchange had frozen or intercepted $2.85 billion. Binance also reported replenishing 98% of affected assets in its November 3 update.

Meanwhile, South Korean regulators are reviewing exchange security measures and considering cold-wallet requirements above the existing 80% minimum.