Researchers warned of North Korean hacking tactics years before $6.3B Binance heist
Security experts had long flagged the social engineering tactics that ultimately allowed hackers to infiltrate Binance and steal $6.3 billion.

Binance has confirmed that North Korean hackers gained access to its systems through a sophisticated, month-long social engineering scheme. By posing as recruiters and engaging a company software engineer, the attackers convinced the target to download malicious software, ultimately leading to the theft of $6.3 billion in cryptocurrency.
Cybersecurity researchers have issued recurring warnings about these types of patient, long-running campaigns. While the industry has been aware of the threat, the successful breach of the world’s largest exchange highlights the difficulty of defending against highly targeted human-centric attacks.
The FBI and blockchain investigators have formally attributed the incident to North Korean state-sponsored actors. The regime has been widely accused of utilizing large-scale cryptocurrency thefts to bypass international sanctions and fund its nuclear weapons program.