![\"Binance](\"https:\/\/s3-images.ctmedia.io\/media\/article-covers\/2026\/11\/01M6H1WEHAQHGGSH08YS33AB97\/hi-crimeware-as-a-service-a-new-threat-to-crypto-users.png\")
<\/p>\n<\/p>\n
Hackers exploited compromised employee computers and stolen credentials to breach Binance\u2019s wallet infrastructure, according to the exchange\u2019s investigation.<\/p>\n
A coding assignment from a prospective employer seemed like an ordinary part of a job interview. Instead, it was one step in a months-long cyberattack that ended with $6.3 billion stolen from Binance, raising questions about how exchanges protect themselves against threats that target their employees.<\/p>\n
The attack was part of a coordinated campaign that exploited both human vulnerabilities and internal security systems, according to a postmortem<\/a> released by Binance on Tuesday. The exchange\u2019s findings detailed how hackers gradually gained access to its wallet infrastructure before the Oct. 29 theft.<\/p>\n According to Binance\u2019s security report, the attack campaign began in June, when an engineer downloaded a tampered software package while setting up an AI coding tool. Although Binance detected the malware and replaced the affected device, the attackers had already gathered information about the exchange\u2019s wallet team. <\/p>\n