Co-CEO Yi He shared the figure on November 3 in a detailed incident report on the October 29 breach, which reportedly took about $6.34 billion in digital assets from the exchange.

The blocked attempts relied on social engineering, tampered software packages and fake job interviews, all aimed at reaching sensitive data and planting malware on internal systems. Binance attributed the breach to North Korea's TraderTraitor group, the unit also tied to the February 2025 Bybit hack.

Binance froze or intercepted roughly $2.85 billion of the stolen assets and has pledged to replenish affected user funds.

Withdrawals, paused after the attack, have been restored in phases since November 1. North Korea rejected the accusations. The case shows that employee-targeted schemes like fake hiring now sit on the front line of exchange security.