He Yi: Binance has identified and blocked 57 suspected North Korea–linked cyberattacks since 2026.

Since 2026, Binance’s security team has identified and successfully thwarted 57 suspected cyberattacks linked to North Korean hacker groups, according to disclosure by co-founder He Yi. These incidents underscore that state-sponsored threat actors continue to target the cryptocurrency industry as a top priority. Attack methods have been diverse, including social engineering lures disguised as job interviews, malware masquerading as mainstream development tools, open-source software packages and browser extensions compromised with backdoors, counterfeit video-conferencing applications, and other social engineering tactics designed to steal user account credentials or deploy remote access trojans. He Yi emphasized that although Binance has intercepted the majority of these attacks, “even a single breach would carry severe consequences—such incidents simply should not happen.”