Unverified50% confidenceFactExact time
The attackers are suspected of first infecting the employee's laptop via phishing emails or malware, then using it as a springboard to penetrate Binance's internal systems.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/30/2026
First Seen
Valid until: 11/13/2026
Sources
Related Entities
Related Claims
UnverifiedThe attack was a session hijacking attack (Session Grabber), in which the attacker bypassed password verification and directly took over accounts by stealing browser session cookies.73% similarUnverifiedAttackers obtained the wallet's private key or signing information by implanting tiny spy chips during the device production or distribution stage.72% similarVerifiedAttackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.72% similarUnverifiedA security research institution disclosed a large-scale crypto asset theft targeting Binance; investigators suspect the attackers gained internal access by compromising a Binance employee's laptop, ultimately leading to the transfer of crypto assets worth up to 6.3 billion USD.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1116649API
curl https://kongchang.com/api/v1/knowledge/claims/1116649MCP
get_claim(id=1116649)