Binance published its incident report on Tuesday.

$6.34 billion gone on October 29, four times the previous crypto record.

One blockchain intelligence firm calls it likely the largest known theft of any kind.

Here’s how it started.

In June a wallet engineer wanted to install a popular AI coding tool.

He searched for it.

He clicked a result.

The installer he downloaded had been tampered with.

Binance caught that one, replaced the machine and reset his credentials.

The attackers kept what they’d learned: who was on the wallet team.

Here’s the second door.

In September a second engineer got a message on a real job site from a “project director” at a company that didn’t exist.

Live video interviews with a fake HR rep.

A social media profile with family photos to build trust.

Then a coding assignment to complete at home.

The assignment was the malware. 😳

Here’s the third door.

It’s the one that should bother you.

On October 20 the attackers used that compromised laptop plus Binance’s own internal AI tool to reach two more wallet developers.

From there they got credentials and a token that let them deploy software inside the wallet infrastructure.

Nine days later they ran the script.

Co-CEO Richard Teng’s words on CNBC: they “moved violently through our internal AI tools.”

Think about that.

Binance built an AI assistant to help its engineers work faster.

The attackers used it to move faster.

Binance has replenished 98% of the stolen assets, rebuilt the wallet system and the AI tool from scratch, and decommissioned every credential involved.

Binance hasn’t named the attackers.

TRM Labs and Chainalysis have: North Korea’s TraderTraitor unit, the same crew behind the Bybit heist last year.

Let me explain why this is your problem.

Nobody on your team is going to get hit for $6 billion.

Every one of them does the three things that opened the doors.

They search for AI tools and click the first result.

They take recruiter calls.

They give the company AI assistant access to everything, because that’s what makes it useful.

The lesson isn’t to stop.

The AI tool with the most access is now the most valuable thing on your network.

It needs the same lock as the money.

Speaking of tools you grab in a hurry...

The first domino at Binance was an engineer searching for an AI tool and clicking the top result.

The tools you grab in a hurry are the ones that hurt you.

So, stop collecting prompts off search results and start with a kit built for the job.

I put together a free Claude Content and Conversion Kit: 10 copy-and-paste workflows for the marketing assets every business need, from welcome emails and landing pages to newsletters and sales emails.

Fill in your brand details once.

Reuse them everywhere.

Every workflow comes with a quality checklist and guardrails that flag missing proof instead of making things up.

👉 Get the Claude Content and Conversion Kit (free)

Binance rebuilt its internal AI tool from scratch after the breach.

Yours can start checked. 😏

HubSpot's CRM is so smart, it now updates itself. Calls get logged and summarized the moment they end. New leads get researched and a first outreach drafted, automatically. Deals move forward on their own, with next steps flagged before you have to ask. 

Even the one repetitive task you've been meaning to fix can now run itself, no code required. Customers using it are already seeing the difference. 

This isn't the CRM you have to work hard to figure out. It's the one already working before you log in.

Get a Demo