Binance Recovers $2.85 Billion After Massive $6.34 Billion Crypto Heist

A sophisticated multi-stage cyberattack resulted in the unauthorized transfer of $6.34 billion in cryptocurrency from Binance wallets. The exchange successfully intercepted or froze $2.85 billion of the stolen assets. The firm has committed to covering the remaining losses from its own reserves.

Investigations indicate the threat actors, linked to North Korean entities, initiated the campaign in June. The attackers utilized social engineering, including fraudulent recruitment processes, to compromise internal engineering devices. These breaches allowed unauthorized access to internal wallet signing services and the exploitation of Ethereum’s EIP-7702 authorization mechanism.

Technical analysis confirms the use of zero-day malware and compromised internal AI tools to bypass endpoint security. The attackers established persistent access by manipulating on-chain delegation authorizations, which functioned independently of standard withdrawal infrastructure. This incident highlights significant vulnerabilities in internal credential management and the security of automated deployment containers.