On November 4, cryptocurrency exchange Binance released a preliminary investigation report on a security incident, detailing the attack process that led to the theft of approximately $6.3 billion in assets. The report states that an engineer, referred to as A, from the wallet operations team downloaded a compromised Homebrew installation package while searching for and installing an AI programming tool in June 2026. After the security team detected anomalies and replaced the relevant devices, A still exposed the wallet infrastructure permissions. The report indicates that the attackers continued to remain dormant. In September, the attackers contacted another software engineer, referred to as B, posing as project directors through a recruitment platform, conducting video and social media interviews, and sending a code repository as an assignment. B downloaded the repository onto their work computer and set it up according to the instructions. One of the files, sized at 3,414 bytes, bypassed terminal security protections and used internal AI tools to find traces related to A. The report states that on October 30, the attackers logged into another employee, referred to as C's, computer and transferred the $6.3 billion. Binance stated that approximately $6.34 billion in assets were affected, with about $2.85 billion frozen or intercepted. The losses will be covered by the SAFU fund and company funds, and as of October 31, 98% of the affected tokens have been replenished.