Yu Xian, founder of SlowMist: Binance Hack Not a Minor Mistake, but an APT Attack Following the release of the investigation report on the $6.3 billion theft from Binance, many questioned whether the engineers involved made a basic error. Yu Xian believes this was an APT (Advanced Persistent Threat) attack, with social engineering, poisoning, lateral movement, and zero-day exploits all linked together. According to Binance's preliminary report on November 3rd, the hackers began their operation in June, first infecting the computers of two engineers with a modified AI programming tool installation package and fake job interviews. They then expanded their control using internal AI tools, finally transferring assets on October 29th. Yu Xian cautions that instead of passively observing, it's more important to examine one's own and one's team's ability to defend against such attacks.