SaxX described a cyberattack against Binance that he attributed to North Korea and presented as a theft of $6.3 billion. According to his account, the operation allegedly began in June when an engineer from the wallet team installed an infected version of Homebrew. Binance reportedly detected the incident, replaced its computer, and reset its passwords, but the hackers had already mapped the team. In September, a second engineer was supposedly targeted by a job offer posted on LinkedIn, according to SaxX, who referred to Fortune. After fake interviews, the employee downloaded a programming exercise containing a malicious version of pyenv, which Binance's antivirus allegedly did not detect. On October 20, the hackers reportedly used an internal artificial intelligence tool to access the computers of two engineers and found a way to execute code on Binance's servers on one of them. SaxX indicated that on October 29 at 21:05 Paris time, the hackers exploited EIP-7702 to take control of an internet-connected wallet. According to his account, 233 million XRP had been transferred in four minutes, followed by other cryptocurrencies. Binance reportedly took about four hours to halt the transfers, with the last occurring at 00:56 and access being cut off 14 minutes later. SaxX explained that the security system, which distributed keys among multiple parties, prevented a single key from quickly revoking access. He added that Binance claimed to have reimbursed 98% of the stolen cryptocurrencies from its own funds and that $2.85 billion had been frozen or intercepted with partners. According to SaxX, the head of Binance stated that the FBI attributed the attack to North Korea. He also recalled that the previous record was the theft targeting Bybit in 2025, of approximately $1.5 billion, also attributed to North Korea, and that Binance claimed to have blocked 57 North Korean attacks this year. #Cyberattaque #Binance #Cryptomonnaie (translated)