Fact-check analysisVerified as of November 4, 2026Curated by FactVerifyPrimary Source Verified
True

North Korea stole $6.3 billion in cryptocurrency using a fake interview scheme, according to Binance.

Cryptocurrency exchange Binance reported that hackers tied to North Korea stole $6.3 billion using malware and bogus job interview schemes.

Hackers behind $6.3bn Binance heist ‘used malware and bogus job interviews’

Hackers behind $6.3bn Binance heist ‘used malware and bogus job interviews’

Source: theguardian.com

At a glance

Key Evidence

Verified November 4, 2026
  • Binance revealed that hackers stole $6.3 billion in cryptocurrency from its exchange through an operation that commenced in June.

  • Investigative reports and blockchain analysis confirmed that the attackers utilized malware and bogus job interview schemes.

  • Independent experts and news outlets attributed the methodology to North Korean state-sponsored threat actors.

The reporting

What the Evidence Shows

Cryptocurrency exchange Binance disclosed that hackers compromised its platform to steal $6.3 billion through a coordinated cyber operation that began in June. Official incident disclosures and independent blockchain intelligence firms confirmed that the attack vector involved malicious software delivered via fraudulent job interviews and social engineering tactics.theguardian.comtheguardian.comHackers behind $6.3bn Binance heist ‘used malware and bogus job interviews’Accurate Claim: The claim is true according to official incident disclosures and reports from cryptocurrency exchange Binance, alongside major news organizations (such as Bloomberg, Reuters, Axios, and The Guardian) The attackers posed as... Major news organizations including Axios corroborated these findings, noting the involvement of North Korean threat actors in the multi-billion-dollar heist.axios.comaxios.comNorth Korea Job Interview Binance HeistAccurate Claim: The claim is true according to official incident disclosures and reports from cryptocurrency exchange Binance, alongside major news organizations (such as Bloomberg, Reuters, Axios, and The Guardian)

While North Korean officials denied responsibility for the cyber attack, investigative reports and blockchain analysis linked the methodology directly to established state-sponsored recruitment fraud and cyber operations.cbsnews.comcbsnews.comBinance Hack North KoreaWhile Pyongyang denied the accusations, Binance and independent blockchain intelligence firms confirmed the methodology aligns with known North Korean recruitment-fraud and social-engineering cyber tactics

Primary trail

Verified Sources3

Hackers behind $6.3bn Binance heist ‘used malware and bogus job interviews’

theguardian.com
Open source

North Korea Job Interview Binance Heist

axios.com
Open source

Binance Hack North KoreaPrimary Source Extraction

cbsnews.com
Open source
Verified Document Excerpt
"A U.S.-based blockchain intelligence firm said a North Korean cyber unit was likely behind an attack that stole $6.3 billion from Binance, the world's biggest cryptocurrency exchange. Binance said on Friday that deposits were unaffected, while withdrawals were suspended and are expected to resume in the next day or two. The company, which worked with blockchain partners to freeze roughly $3 billion in affected assets, also said it will cover all customer losses."
Keep exploring

Where to go next

Continue with the evidence, catch up on the week, or save this check for later.