تخطَّ إلى المحتوى الرئيسي
727 Finance
العربية

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

أخبار ذات صلة

  1. وزارة العدل في مدغشقر: تم تسليم 148 مواطنًا صينيًا متورطين في قضايا احتيال بالعملات المشفرة.

  2. تعرض عقد سوق Talis Protocol للاختراق، وسُرقت ما يقرب من 5,700 من الرموز غير القابلة للاستبدال (NFTs) المحتجزة في الضمان.

    PANews ٢ نوفمبر: نشرت Talis Protocol إفصاحًا مفاده أنه في ٣١ أكتوبر، استغل مهاجم ثغرة أمنية في عقود السوق والمزاد الخاصة بها على سلسلة Injective، وسرق ما يقرب م...

  3. ما هو EIP-7702؟ ترقية إيثيريوم وراء حادثة اختراق بينانس

    يسمح EIP-7702 للمحافظ العادية على إيثيريوم بتشغيل تعليمات العقود الذكية، مما يتيح بذلك المعاملات المجمّعة والمعاملات المدعومة (سداد رسوم الغاز نيابةً عن المستخد...

  4. تحليل: غسل قراصنة بينانس ما يقرب من 242 مليون دولار عبر ترون خلال يومين.

  5. هي يي تنفي شائعة "علاقة مهندس باينانس بجاسوس كوري شمالي أدت إلى السرقة"