A post by @heyibinance on X.

Binance co-founder Yi He said the exchange’s security team detected and prevented 57 suspected North Korea-linked cyber threat cases throughout 2026, describing persistent state-sponsored targeting of the crypto industry. The disclosed techniques included fraudulent job interviews, malware disguised as popular developer tools, compromised software packages and browser extensions, fake video conferencing applications, and social engineering campaigns to steal credentials or deploy remote access malware. He said many attempts were intercepted but warned that the cost of failing to stop even one was severe, adding that “this should never have happened.” The disclosure matters because North Korea-linked actors have repeatedly targeted crypto exchanges and developers to fund state operations, making exchange security and developer tooling key risk vectors for the industry. Watch for further details from Binance on the 57 cases, any identified indicators of compromise, and whether other exchanges report similar campaign volumes.