Binance Probe Traces Wallet Breach to Compromised Tools and Credentials

Binance’s preliminary investigation traced unauthorized access to its wallet-signing service to compromised developer tools and stolen deployment credentials, showing how an employee-device breach reached systems used to authorize fund transfers. The attack chain began in June, when a wallet operations engineer downloaded a tampered Homebrew installer while looking for an AI coding tool. Binance’s security team detected abnormal activity, replaced the device and rotated credentials, but information about the engineer’s role and wallet infrastructure colleagues had already been exposed.

Source: TokenPost