Binance says attacker used compromised computer and internal AI tool to control wallets

The exchange traced a breach of between $6.3 billion and $6.36 billion to a hijacked engineer laptop and one of its own AI tools Binance says an attacker took control of its wallets using a compromised computer and an internal AI tool. The disclosure adds a new layer to the October 29, 2026 breach, which drained between $6.3 billion and $6.36 billion in digital assets from the world’s most prominent exchange. The attacker did not need to steal private keys. They needed one trusted machine and a tool Binance built for itself. How the breach unfolded Funds began leaving at 20:05 UTC, and the transfers ran for roughly 20 minutes. In that window, assets were spread across ten different blockchains, including Ethereum, Bitcoin, Tron, and Solana. Early investigation pointed to the laptop of a DevOps engineer, the kind of employee who manages the systems that keep an exchange running. That compromised machine gave the attacker unauthorized access without any evidence that private keys had leaked. Binance’s latest statement fills in the other piece. The exchange says an internal AI tool was part of how the attacker gained control over wallets. Binance has identified several attack vectors ...