There has been speculation that the attack on Binance, the cryptocurrency exchange, was conducted using a flaw in a "fork" of Firefox, which allowed a "drive-by download" to occur.
As far as I can tell so-far, this appears untrue: the company themselves said a member of staff was sent fake job details by "TraderTraitor", an official North Korean hacker-group (source: FBI), posing as a legitimate recruiter.
During the second of these fake interviews, which were conducted on a Binance company device, they asked the Binance employee to download and run code from an online site, which led to their device (a Mac, it would seem), being compromised by malware so-new their anti-virus solution did not detect it.
So currently it sounds like a socially-engineered malware-attack, to me, where someone was tricked into downloading or running something, not a "drive-by download". So whatever browser was used is irrelevant: if you download and run malware that is currently undetected, no browser can realistically stop that.
Details here:
https://www.bleepingcomputer.com/news/security/binance-says-fake-job-interview-led-to-63-billion-cry...
Official write-up from Binance (can only be viewed if you're in the US, or on a VPN set to the US):
https://www.binance.com/en/blog/community/3229153443759566763
