Binance hackers posed as recruiters to breach a dev's laptop before $6.3B attack
Binance hackers used fake job interview to breach PC before $6.3B attack
Hackers breached a Binance developer's computer by staging a fake job interview, then used that access in a $6.3 billion attack. The Hacker News discussion flags multiple failures: one developer could reach billions, the interview ran on a work laptop, and that laptop could execute random code with access to sensitive systems. Commenters also debate whether tech workers need liability insurance.
Multiple wtfs: one dev can access 6B; the dev does job interview from the work laptop; the work laptop has permission to run random executables with it having access to sensitive stuff.
- cloudie78
I’m sorry what kind of a circus are you running where people with prod access run random untrusted code on the same boxes with credentials to prod systems?
- jluxenberg
Wow yikes! On the one hand -- it's obviously a bad idea to use your current employer's laptop for a job interview.
But social engineering takes many forms and anyone could be suseptible.
Do we need to start carrying liability insurance (like doctors do)? There are so many hazards these days working in tech which can cause you to be liable for huge amounts of damage. Using agents seems fraught too; they can easily go "off the rails" and take actions you didn't intend.
- Arcuru
It does seem like there has been an increase in that social engineering approach. The Rust ecosystem was being targeted recently too, enough that they felt the need to warn people about it: https://blog.rust-lang.org/2026/09/17/targeted-attacks/