29 October Binance Security Incident: Initial Findings and Response Update

Binance reported a security incident on 29 October 2026 in which attackers moved roughly USD 6.34 billion in digital assets, with about USD 2.85 billion frozen or intercepted so far, subject to reconciliation. The attack began with social engineering: a Binance software engineer was lured through fake job interviews into running a malicious code repository, which gave attackers access that they used to reach the wallet signing service. Binance says it will absorb the losses itself, has set aside more than 100% of the funds required, and that as of 31 October 2026, 98% of the impacted token assets had been replenished. The article also cites an FBI statement indicating North Korea is responsible, and says an independent security review is underway.