The phrase "hijacking links" is, in a word, a lie. Its standard meaning implies that Brave changes the URL loaded when you click on a link (any or many links) in a web page. That never happened, and would be fatally scandalous if tried by any reputable browser.
What happened was a bug in a keyword and domain autocomplete tier we added. Reminder for those not aware: all browsers add reference codes identifying the browser make (not the user) to keyword queries when you type words into the address bar. This is industry standard. See https://twitter.com/BrendanEich/status/1273327455105773568?s....
The bug in Brave was a flag set wrong for two domain names, which are not keywords: binance.us and binance.com. These should not have default-completed when typed into the address bar with a Binance affiliate code, they should have been suggested completions the user would have had to pick by arrow down and or mouse equivalent. We fixed the defaulting bug and turned off the entire suggested completions feature. As noted by someone else in a comment nearby, we instructed Binance not to pay us for any referred new users who traded (Binance does not pay on the referral, they pay only after if the user trades, sharing a fixed proportion of trading fees).
So this was not "link hijacking" in any case. I'm sorry for the blunder, and we added a process step around any changes to address bar to audit harder.