Binance tests staff with monthly phishing drills, retrains failures, and may dismiss repeat offenders as social engineering attacks grow.