Binance Tests Staff Against Simulated Phishing Attacks

Binance's chief security officer, Jimmy Su, revealed that the exchange runs monthly 'red team' tests on its staff to simulate phishing attempts and gauge security awareness.

The internal program, which has been in place for three to four years, aims to identify vulnerabilities in Binance's workforce and improve overall security hygiene.

Su explained that employees who fail the simulations undergo remediation training, while repeated failures can negatively impact their performance reviews and potentially affect job outcomes.

The red team uses real-world lures, such as fake recruiter outreach and 'free conference invites,' to test staff resilience. Su emphasized that social engineering remains a significant risk factor in crypto security incidents, citing an estimated 65% of breaches driven by this tactic in 2025.