Binance reported a $6.3 billion security breach occurring on October 29, 2026. The FBI attributes the theft to TraderTraitor, a North Korean hacking operation linked to Lazarus Group. According to Binance’s incident report, the attack was a sophisticated, multi-stage campaign. It began in June with a supply chain attack involving a malicious Homebrew installation. In September, a software engineer was targeted via a fake job interview process on a legitimate platform. The engineer was instructed to download a malware-laced code repository during a simulated assignment. The malware replaced a legitimate development tool component (pyenv) and evaded endpoint security. Attackers subsequently used compromised credentials and internal AI tools to access wallet infrastructure, triggering the theft on October 29. Binance has rebuilt compromised systems and is cooperating with law enforcement. https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398