Binance Discloses $6.43 Billion Theft Linked to Tampered Homebrew and Recruitment Social Engineering

Binance announced on Tuesday that the theft of $6.43 billion in assets from its platform was the result of a sophisticated, multi-stage campaign conducted by threat actors. According to the exchange, the attack vector included the use of a tampered Homebrew installation and recruitment-themed social engineering attacks directed at two of its engineers.

The company emphasized that the incident was not a single isolated breach or a simple phishing incident, suggesting a deliberate and complex operation targeting its development and engineering infrastructure. The disclosure details the use of compromised software tools and social engineering tactics designed to gain initial access to Binance's internal systems.

While specific technical details regarding the exact mechanics of the Homebrew tampering and the precise social engineering methods remain under review, Binance has indicated that the attack combined supply chain compromise techniques with targeted human manipulation to facilitate the large-scale asset theft.