Context:

A sophisticated breach at the world's largest crypto exchange unfolded over several months, culminating in a $6.3 billion theft that could be the largest in crypto history. It began with an employee downloading a tampered coding-tool AI utility in June, followed by security gaps after the hacker exploited a second job-interviewed engineer via a malicious code repository. The attacker then leveraged compromised machines and an internal AI tool to seize control of wallet systems in October, with the final blow delivered on Oct. 29. Binance apologized, pledged to repay affected users, and said it would boost AI-enabled defenses and establish a security research fund; authorities have publicly attributed the attack to a North Korean group, a claim Pyongyang denies, and the investigation continues.

Dive Deeper:

• The breach traces back to June, when a wallet developer on Binance's team downloaded a tampered AI-enabled coding tool. Although the company detected the issue, replaced the device, and changed credentials, the hacker still gained access to the developer's role and related teammates.

• In September, a second software engineer seeking a new job downloaded malicious code from a repository after interviewing for a role, including virtual meetings with a CEO of a fictitious company, facilitating further access.

• On October 20, the attacker used the compromised computer and an internal AI tool to gain control of the wallet development system and a second wallet developer's environment, expanding the footprint.

• The final phase occurred on October 29 when the attacker employed the second wallet developer’s computer and stolen credentials from the first to trigger a malicious script and carry out the theft.

• Binance issued an apology, stating the incident should not have happened and expressing regret for the disruption caused to users and partners, while committing to repay all affected funds.

• The company said it would increase investments in AI-enabled threat detection and establish a security research fund with collaborations with leading AI firms to bolster defenses.