A Fake Job Interview Became the Entry Point for Binance’s $6.3 Billion Cyber Heist

Study the questions and tasks

Work through the material below, or start the interactive practice above to complete an attempt. Try the exercises before opening any answer or transcript sections, then use them to review your work.

Practice level

C2. Try this level if you can follow the instructions and understand most of the language; choose an earlier level if you need more support.

Question formats

Single choice

How to approach this practice

Read the questions, then listen before opening the transcript. Notice names, numbers and any corrections the speaker makes.

1. Question 1 · Single choice

   Choose one answer.

   How long might the final attack itself have lasted?

   Return to the passage, recording or visual
   1. About twenty minutes
   2. Several hours
   3. One week
   4. Several months
   Check answers and explanations

   Answer

   About twenty minutes

   The opening sentence contrasts the brief attack with months of preparation.

   The attack on Binance may have lasted only about twenty minutes, but the operation behind it developed over several months.

2. Question 2 · Single choice

   Choose one answer.

   When did Binance say the hackers first tested its systems?

   Return to the passage, recording or visual
   1. In April
   2. In June
   3. In September
   4. The following week
   Check answers and explanations

   Answer

   In June

   The recording places the initial testing in June.

   In an initial assessment, the cryptocurrency exchange said hackers first tested and attempted to penetrate its security systems in June.

3. Question 3 · Single choice

   Choose one answer.

   Through what channel was the engineer initially contacted?

   Return to the passage, recording or visual
   1. A job-hunting platform
   2. A cryptocurrency forum
   3. An internal Binance network
   4. A government reporting portal
   Check answers and explanations

   Answer

   A job-hunting platform

   The initial approach came through a platform used for seeking employment.

   In September, a Binance engineer was contacted through a job-hunting platform by someone claiming to be a project director at a company that did not exist.

4. Question 4 · Single choice

   Choose one answer.

   Who supposedly conducted the second interview?

   Return to the passage, recording or visual
   1. A Binance security officer
   2. A supposed chief executive
   3. An FBI investigator
   4. A verified human-resources representative
   Check answers and explanations

   Answer

   A supposed chief executive

   The second interview was attributed to a fictitious company executive.

   The employee was later told to conduct a second interview with the fictional company’s supposed chief executive through a popular social-chat application.

5. Question 5 · Single choice

   Choose one answer.

   What was the assignment file designed to conceal?

   Return to the passage, recording or visual
   1. A request for salary information
   2. Malicious code
   3. A list of customer accounts
   4. A cybersecurity review plan
   Check answers and explanations

   Answer

   Malicious code

   The file appeared professional while containing code intended for attack development.

   The file was not a genuine test of professional ability: it contained malicious code that allowed the hackers to develop an attack.

6. Question 6 · Single choice

   Choose one answer.

   Which group did the FBI identify as responsible?

   Return to the passage, recording or visual
   1. A private recruitment agency
   2. TraderTraitor
   3. Binance’s engineering department
   4. An independent cybersecurity firm
   Check answers and explanations

   Answer

   TraderTraitor

   The FBI attributed the operation to the state-sponsored unit TraderTraitor.

   The FBI identified the perpetrators as TraderTraitor, a North Korean state-sponsored military unit.

7. Question 7 · Single choice

   Choose one answer.

   According to the recording, what often matters more than technical sophistication?

   Return to the passage, recording or visual
   1. The size of the targeted company
   2. Making a request seem routine and trustworthy
   3. Publishing the attacker’s identity
   4. Using an unusually complex application
   Check answers and explanations

   Answer

   Making a request seem routine and trustworthy

   The recording emphasizes the persuasive appearance of ordinary, trustworthy requests.

   Its effectiveness often depends less on technical sophistication than on making a request appear routine and trustworthy.

8. Question 8 · Single choice

   Choose one answer.

   What did Binance say it had done with most of the stolen cryptocurrency?

   Return to the passage, recording or visual
   1. Transferred it to the FBI
   2. Replaced it with its own funds
   3. Returned it through the recruiter
   4. Locked it in an independent account
   Check answers and explanations

   Answer

   Replaced it with its own funds

   The exchange stated that it had replaced most of the stolen funds itself.

   The exchange had also said it had replaced most of the stolen cryptocurrency with its own funds.

What to review next

Listen again to difficult sections, then open the transcript to check what you heard. Repeat a useful phrase aloud and try the recording once more without the text.

A focused practice result shows how you did on these tasks. Use several activities across skills to decide what to study next; one practice score does not certify an overall CEFR level.

Before you practise: a worked example

Listen for the final information, especially when a speaker corrects or changes an earlier statement.

Example transcript: “Let’s meet at five — actually, half past five would be better.” What is the final suggested time?

The final suggested time is 5:30. Actually signals a correction; the first time is replaced by the later suggestion.

This teaching example is separate from the scored questions. After your test, compare any mistakes with the explanation and revisit the topic before trying again.