Binance said the 29 October 2026 incident involved its wallet system and attributed the activity to North Korean actors. It reported a chain of compromises: Engineer A was hit by a tampered Homebrew installation, while Engineer B was targeted through a fake interview; the attacker then used an internal AI tool on Engineer B’s computer to reach Engineer A, whose stolen deploy token was used to launch the wallet attack. Binance’s incident update says it rebuilt the affected wallet system and AI tool, replaced devices, and revoked related credentials and tokens. Binance’s incident update

Binance said the 29 October 2026 incident involved its wallet system and attributed the activity to North Korean actors. It reported a chain of compromises: Engineer A was hit by a tampered Homebrew installation, while Engineer B was targeted through a fake interview; the attacker then used an internal AI tool on Engineer B’s computer to reach Engineer A, whose stolen deploy token was used to launch the wallet attack. Binance’s incident update says it rebuilt the affected wallet system and AI tool, replaced devices, and revoked related credentials and tokens. Binance’s incident update

The report supplied here does not specify the amount stolen or name the affected wallets.