Binance reveals details of $6.36 billion crypto theft: Hackers breached hot wallets via fake job offers and AI tools
全球最大加密货币盗窃案:黑客假扮 HR 和 CEO 骗过员工,偷走币安 63.6 亿美元
Binance published an investigative report detailing the theft of approximately $6.36 billion in cryptocurrency. Hackers infiltrated the hot wallet authorization system by combining social engineering via fake job recruitment, supply chain tampering of AI coding tools, and lateral movement using internal AI tools. The attackers leveraged the EIP-7702 delegation mechanism to transfer assets. As of November 3, Binance has frozen or intercepted approximately $2.85 billion in assets, replenished 98% of the affected funds, and announced plans to increase investment in AI security and endpoint protection.
The report details the complete attack chain wherein hackers leveraged malicious developer tools and internal AI tools for lateral movement, offering enterprises a concrete case study to evaluate privilege isolation between AI coding tools and internal systems.
Source:IT之家 · AI 筛选 · ithome.com