Binance has just released a preliminary investigation report detailing how they were hacked by North Korean hackers who stole over $6 billion. A Binance software engineer had his resume posted on a job search website when someone claiming to be a project director contacted him, saying they wanted to discuss a potential position. The person arranged a video interview with him by an HR representative, who showed their face. To lower his guard, the HR representative even sent him their social media account, which included photos and videos of him, making him appear real. The second round of interviews took place on a popular chat application, where he spoke with someone claiming to be the company's CEO, but the company was fake. Near the end of the interview, he was asked to download a coding challenge as a technical test. The Binance employee downloaded and ran it on his work computer. This code secretly and automatically executed during installation, replacing a legitimate development tool, pyenv, with a malware-infected version, then connecting to the hacker's server and even cleaning up its traces. Even Binance's antivirus software at the time failed to detect it. Starting from this computer, North Korean hackers gradually infiltrated the exchange, gaining access to its wallet system. A little over a month later, Binance was hacked out of more than $6 billion. Crucially, there are still a group of Binance employees listed on LinkedIn, who are likely potential targets for the North Korean hackers' scams.