# Binance details developer compromises behind $6.34 billion cryptocurrency theft

_Published Wednesday, November 4, 2026 at 9:05 AM EST · Security · Latest · Tier 2 — Notable_

![Binance — Primary](https://cdn.mos.cms.futurecdn.net/7T7K3fGxiXhFhwEVahsG4-1280-80.jpg)

Binance's November 3 security report says attackers used a malicious Homebrew installation and fake job interviews to compromise engineers before stealing approximately $6.34 billion in cryptocurrency on October 29.

One engineer downloaded the altered software in June. Another installed malware through a recruitment coding assignment in September; Binance says its endpoint security tools missed that infection. The attackers later obtained a container deployment permission token and used stolen credentials to reach the exchange's internal wallet signing service, enabling transfers from five hot wallets outside normal withdrawal procedures.

Binance said it had frozen or intercepted approximately $2.85 billion in compromised assets and replenished 98% of affected funds.

## Sources

- [Tom's Hardware](https://www.tomshardware.com/tech-industry/cryptocurrency/binance-heist-began-with-fake-job-interviews-and-a-malicious-homebrew-download-attackers-used-adulterated-software-and-social-engineering-to-gain-access-to-billions-in-assets)

---
Canonical: https://techandbusiness.org/newswire/lyY_WQ89WhP7jwvUjvnBlH
Published: 2026-11-04T14:05:57.223Z
Story chronology: 2026-11-03T00:00:00.000Z
Retrieved: 2026-11-04T22:05:45.655Z
Publisher: Tech & Business (techandbusiness.org)