Binance says that attackers exploited the compromised computer and an internal AI tool on October 20 to access systems belonging to two wallet developers. Nine days later, they used the second developer's computer and credentials stolen from the first to execute a malicious script initiating unauthorized cryptocurrency transfers. 

The company found no evidence that wallet private keys were compromised. “This should not have happened, and we apologise for the concern, disruption and uncertainty it caused our users, partners and the wider industry,” Binance stated.