EL7.AI
CryptoMediumUpdated×4•Originally published 4 November 2026•Updated 4 November 2026•
1 min read

Binance reveals $6.34B hack used fake job interviews as withdrawals hit $4.72B

Key Facts

1Digital assets worth about $6.34 billion were affected by the Binance incident on October 29, 2026.
2Binance said it had replaced 98% of affected assets by October 31, 2026.
3Binance said it had set aside more than 100% of the funds needed to cover losses.
4Binance said about $2.85 billion in assets had been frozen or intercepted as of its November 3 update.

Binance revealed that the security breach affecting $6.34 billion in assets on October 29 was executed through fake job interviews used to target employees. The company reported in a new update that net withdrawals from the platform have risen to $4.72 billion since operations resumed, up from the previously estimated $3.64 billion. The exchange stated it continues to address the aftermath of the incident after replacing 98% of affected assets by October 31.

Binance explained that attackers leveraged unauthorized access gained through these interviews to reach an internal wallet-signing service, enabling the transfer of 18,270 BTC and 233.46 million XRP to external addresses on October 29. According to Reuters data, the $4.72 billion withdrawal volume represents increasing pressure on the platform's liquidity after Bitcoin hit a six-week low of $76,368 on the day of the hack. The company maintains approximately $2.85 billion in frozen or intercepted assets as of its November 3 update.

Latest Updates · 2

  1. Notable·

    Update: Bitquery data revealed that the hacker split the 233.46 million stolen XRP from Binance into seven different wallets. The data specified that six of these new addresses are whale-sized wallets, each holding over one million tokens, as part of the ongoing tracing of asset movements following the October 29, 2026, breach.

  2. Notable·

    Update: Binance revealed that the attackers gained access to its systems by deceiving company engineers through fake job interviews. The platform explained that this process involved tricking employees into installing malware-laced software, which allowed the hackers to compromise the internal wallet-signing service.

Open on chart