North Korean attackers allegedly stole approximately USD 6.34 billion from Binance after compromising developer laptops through a tampered Homebrew installation and a malicious fake-interview repository. The malware replaced `pyenv`, while subsequent access exposed a container deployment token that enabled unauthorized transactions through Binance's wallet-signing service. The attacker also established an EIP-7702 delegation granting partial control over a hot wallet, and SafeDep assessed the recruitment method as consistent with the DPRK-linked Contagious Interview campaign.