tl;dr An engineer duped by a fake job interview installed a job test on his work computer and got pwned. An exploit on that one machine was able to drain Binance's hot wallets of $6bn in less than an hour.
https://www.coindesk.com/business/2026/11/03/binance-s-usd6-3-billion-hack-began-with-a-fake-job-interview-exchange-says
People are so worried about self-custody because they think the professionals can do it better. It takes one dumb employee to break it all apparently. Gotta love the engineer was looking for another job and installs malware accidentally on his employer's machine in seeking the new job. This engineer, who somehow has credentials on his machine that can activate massive automated funds transfers without safeguards, ran f-ing `brew install` on a work machine without a clue what it was.
Trust yourself. Learn some basic data security practices. Learn to encrypt with free OSS. Learn simple steps to verify anything you download. And just DON'T. EXECUTE. ANYTHING sent to you by a person on the Internet. Why is that so difficult?
submitted by /u/rgnet1[link] [comments]