According to Cointelegraph, Binance CSO Jimmy Su warned in July that fake job interview tactics targeting employees—designed to trick them into running malicious code—were a major internal security concern. The exact vector materialized in September when a Binance engineer downloaded a malicious coding assignment during a fake job interview, which Binance's preliminary investigation linked to the October $6.3 billion cryptocurrency theft, the largest crypto exchange hack on record.
The malware evaded endpoint security through obfuscation techniques. Su acknowledged that if employees fall for such fake interviews, Binance must detect and prevent the malicious code from executing. The exchange has since tightened device controls, rebuilt affected wallet systems, and strengthened access controls following the breach.