US strikes Iran's Qeshm Island as Qatar-mediated talks stall Democrats secure Senate majority as Americans vote in midterms Dozens killed at Zaporizhzhia aid site as Russia hits grid and Kyiv strikes refinery Trump says US military aid to Israel ends this year, surprising Israeli officials Houthis press toward Aden as attacks on Saudi Arabia delay Asian Cup Africa CDC raises Ebola toll to 5,376 as Israel isolates two suspected cases US-brokered Russia-Ukraine talks set for Abu Dhabi as Europe seeks a role Cyclone Murasu hits Andhra Pradesh after Cyclone Arnab Oil slips below $101 after Qeshm-driven jump as IEA warns of long gas squeeze Three more tankers explode in Hormuz while an Indian is killed in attack near Oman Drones become top killer of civilians in Sudan's war, UN says Freezer hacks reach Germany, UK and Greece after wave across Europe Binance details months-long hack campaign as North Korea denies role AI borrowing tests credit markets as investors seek protection Spain's transport minister resigns after Urda rail crash Israeli opposition unites behind Eisenkot but stays split over Arab parties Australia raises rates to 18-year high as ECB succession race opens Row over German riots continues as Madrid housing camp is dismantled Black Sea shipping attacks widen and test NATO limits UK and EU complete deal to remove Brexit checks on food and animal products China halts new listings after worst stock market month in over a decade Schaeffler to cut 3,460 jobs in Europe and close five plants Greenland's parliament ratifies security deal with US and Denmark Nvidia tells data-centre clients to cut China exposure Kremlin says work under way on Trump-Putin-Xi meeting at APEC summit Nigeria: bandits abduct 14 pupils and a teacher, police ambushed in Zamfara Courts rebuff Trump administration on voting Poland sends special forces to Kaliningrad border after Tusk warns of provocation Bangladesh garment workers defy calls to end wage protests on fourth day New York child dies of measles, state's first fatal case in 30 years US suspends South Africa and Rwanda from AGOA trade programme Bomb threats force flight diversions across Europe EU court adviser says Google's Gemini may infringe press copyright Brazil publishes first global roadmap for phasing out fossil fuels China accuses Philippine politicians of 'intolerable' conduct as tensions rise North Korea warns Japan over missiles and joint drills Israeli forces kill four more in Gaza, bringing post-ceasefire toll near 1,600 Western Sahara conflict risks escalation as UN mission ends Polish Constitutional Tribunal standoff deepens Czech public media strike against Babiš government's funding changes Zelensky confirms Ukrainian hack of Russian emergency alert app US strikes Iran's Qeshm Island as Qatar-mediated talks stall Democrats secure Senate majority as Americans vote in midterms Dozens killed at Zaporizhzhia aid site as Russia hits grid and Kyiv strikes refinery Trump says US military aid to Israel ends this year, surprising Israeli officials Houthis press toward Aden as attacks on Saudi Arabia delay Asian Cup Africa CDC raises Ebola toll to 5,376 as Israel isolates two suspected cases US-brokered Russia-Ukraine talks set for Abu Dhabi as Europe seeks a role Cyclone Murasu hits Andhra Pradesh after Cyclone Arnab Oil slips below $101 after Qeshm-driven jump as IEA warns of long gas squeeze Three more tankers explode in Hormuz while an Indian is killed in attack near Oman Drones become top killer of civilians in Sudan's war, UN says Freezer hacks reach Germany, UK and Greece after wave across Europe Binance details months-long hack campaign as North Korea denies role AI borrowing tests credit markets as investors seek protection Spain's transport minister resigns after Urda rail crash Israeli opposition unites behind Eisenkot but stays split over Arab parties Australia raises rates to 18-year high as ECB succession race opens Row over German riots continues as Madrid housing camp is dismantled Black Sea shipping attacks widen and test NATO limits UK and EU complete deal to remove Brexit checks on food and animal products China halts new listings after worst stock market month in over a decade Schaeffler to cut 3,460 jobs in Europe and close five plants Greenland's parliament ratifies security deal with US and Denmark Nvidia tells data-centre clients to cut China exposure Kremlin says work under way on Trump-Putin-Xi meeting at APEC summit Nigeria: bandits abduct 14 pupils and a teacher, police ambushed in Zamfara Courts rebuff Trump administration on voting Poland sends special forces to Kaliningrad border after Tusk warns of provocation Bangladesh garment workers defy calls to end wage protests on fourth day New York child dies of measles, state's first fatal case in 30 years US suspends South Africa and Rwanda from AGOA trade programme Bomb threats force flight diversions across Europe EU court adviser says Google's Gemini may infringe press copyright Brazil publishes first global roadmap for phasing out fossil fuels China accuses Philippine politicians of 'intolerable' conduct as tensions rise North Korea warns Japan over missiles and joint drills Israeli forces kill four more in Gaza, bringing post-ceasefire toll near 1,600 Western Sahara conflict risks escalation as UN mission ends Polish Constitutional Tribunal standoff deepens Czech public media strike against Babiš government's funding changes Zelensky confirms Ukrainian hack of Russian emergency alert app

Symbolic image: Binance details months-long hack campaign as North Korea denies role

Symbolic image

Binance details months-long hack campaign as North Korea denies role

12 sources

Binance says the record $6.3bn heist grew out of tampered software and fake job interviews months earlier. North Korea rejects the FBI's attribution.

In its report on Tuesday, Binance said an employee of its wallet developer team downloaded a tampered tool in June. In September, a job-seeking engineer was lured into an interview with the supposed chief executive of a fictitious company and downloaded a malicious code repository. On 20 October the attacker used that computer and an internal AI tool to take over the systems of two wallet developers. On Thursday, 29 October, a malicious script moved 233.46 million XRP out of five hot wallets in four minutes, and other withdrawals continued nearly four hours after the first theft.

Pyongyang rejects FBI blame

The FBI blamed North Korea on Saturday; Folha de S.Paulo reports it named the group TraderTraitor. Kim Yo-jong, sister of Kim Jong-un, called the claim "absurd rhetoric" via the state agency KCNA. The Financial Times reports the stolen funds are expected to take months to launder.

Outflows and recovery

Binance says $2.85bn of the $6.34bn drained was frozen or intercepted and that it is repaying affected customers. According to the company, net outflows reached $4.7bn by Monday morning, within expectations, with deposits rising again. Bloomberg reports Binance is losing market share to rivals.