Hackers took about $6.3 billion from Binance last week. Michael Saylor now warns that attackers armed with artificial intelligence (AI) will hunt the weakest software holding customer money.
That risk sits with anyone who keeps coins on an exchange. Binance says it has refilled most of the stolen funds from its reserves, yet the breach began with an old trick, a fake job interview.
Why Saylor Says Exchange Software, Not Bitcoin, Is the Target
Saylor chairs MicroStrategy, a company whose main asset is Bitcoin (BTC). At the OranjeBTC Summit in São Paulo, he was asked about Binance and a second breach in Brazil.
On November 2, security firm Hypernative flagged more than $40 million in suspicious transfers from Mercado Bitcoin, a Brazilian exchange.
Saylor said frontier AI models, the most advanced systems from labs like Anthropic and OpenAI, make hackers far more capable.
“The real threat is someone, a very focused AI hacker, aimed at new software not properly tested, not locked down, that someone rushed into production too quickly.”
He urged exchanges, banks and custodians to run those models daily against their own systems.
“Bitcoin’s sound. Rickety, poorly constructed digital commerce software is going to be hacked.”
He added that every new feature on Ethereum, Solana or Cardano gives attackers another way in.
Did AI Play a Role in the Binance Hack?
Binance says a fake recruiter got an engineer to download a fake job “assignment.”
Attackers then used Binance’s own internal AI tool to take over other staff accounts. Still, the attack relied mainly on ordinary phishing, Fortune said.
The FBI blamed North Korea. TRM Labs tied it to TraderTraitor, the unit the FBI blamed for the $1.5 billion Bybit hack in 2025.
Tether and Circle froze stolen stablecoins, tokens pegged to the US dollar.
Binance now plans to expand AI-powered threat detection. Meanwhile, India’s cyber agency warned on November 4 of an AI-assisted hacker group stealing wallet keys from crypto exchanges.
The next test is Binance’s updated proof of reserves, a public check that it still holds customers’ coins, due once repairs finish.
