Tl;DR

• $6.34 billion in crypto assets affected: On October 29, 2026, Binance suffered an attack the FBI attributed to the DPRK, with attackers moving from compromised engineering workstations to the systems responsible for signing wallet transactions.
• Binance, BitGet and a third company, one pattern: After initial access, attackers relied on legitimate credentials and permissions to move laterally toward production systems; only the initial access vector changed.
• 44% of compromised machines held more than 10 secrets: Developer environments are prime targets for credential theft; what limits the blast radius is knowing where your credentials live, what they access, and how quickly you can revoke them.

On October 29, 2026,…