Binance Says Crypto Thieves Spent Months Setting Up Their Heist

The crypto theft that drained billions of dollars was not a quick smash-and-grab. According to Binance, the group behind it spent months planning the operation before moving any funds.

The exchange says the attackers relied on a mix of methods that combined technical intrusion with old-fashioned social engineering. Some targets had their laptops infected with malware. Attackers also gained access to internal tooling that staff used day to day, which gave them a view into how systems were run from the inside. Fake job interviews were part of the approach as well, a tactic that gets malicious software onto a candidate's machine under the guise of a routine hiring step.

The detail matters because it points to patience and preparation rather than a single lucky break. Security teams often focus on the moment an exploit lands, but the reporting here suggests the groundwork was laid long before that. Attacks that depend on people, including recruiters and engineers who trust a familiar process, are harder to block with code alone.

Binance has not, based on the information available here, published a complete forensic breakdown, so the full sequence of events and the scale of individual losses remain unclear. The account is the exchange's own description of the attack, and it is worth reading alongside any independent findings as they emerge.