Binance publishes investigation into $6.3 billion theft
Binance’s investigation links the theft to a modified Homebrew download, a fake interview and abuse of an internal AI tool.
Binance has published an investigation into the $6.3 billion theft.
The report says the incident began with an engineer who downloaded a modified version of Homebrew in June to install an AI tool for vibe coding. In the second stage, attackers lured an employee to a fake interview, made them download malicious code, and used the obtained access together with Binance’s own internal AI tool to take control of software belonging to two more engineers and seize the wallets.
Why it matters
AnalysisThe case shows how AI-assisted development tools and software supply-chain compromises can become attack vectors against major crypto platforms.
Discuss in community
Share your questions and insights with developers
Related in Ecosystem
Practical guides, core terminology, and agent skills
Claude + Excel for Logistics: 10 Ready-to-Use Scenarios for Rate, OTD, and Cost Audits
A practical B2B playbook on integrating Claude with Excel: ready-made system prompts, formulas, and algorithms for analyzing freight variance, OTD, suppliers, and inventory.
Part II. How to Work with Codex + Optimization/Security/Team
Codex is not just code autocomplete in a chat; it is a full-fledged engineering agent: it reads the repository, plans changes, edits files, runs tests, reviews its own diffs, and c...
Agent Identity & DID (Decentralized Identifiers)
Cryptographic standards (DIDs, Verifiable Credentials, mTLS) that provide autonomous AI agents with a legally and technically recognized identity, signing rights, and action auditing.
Indirect Prompt Injection Defense
A comprehensive set of architectural and software methods to protect autonomous AI agents from hidden instructions placed by attackers in external web pages, documents, or APIs.