Binance Discloses Blocking 57 Suspected North Korea-Linked Cyberattacks in 2026

November 3: Binance co-founder Yi He posted on X that Binance's security team has detected and prevented 57 cyber threat incidents suspected to be linked to North Korea since the start of 2026. The attack methods include fake job interviews, malware disguised as commonly used developer tools, tampered software packages and browser extensions, impersonated video conferencing apps, and social engineering attacks used to steal credentials or install remote-access trojans. Yi He said Binance intercepted many of these attacks, but even a single failure to intercept would carry serious costs, and said "this should not have happened." The post citedBinance's preliminary investigation findings on the October 29 security incident. Binance said in the report that it suffered a serious and highly sophisticated security incident that day and apologized to users.