Zum Hauptinhalt springen
727 Finance
Deutsch

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

Verwandte Nachrichten

  1. Madagaskar-Justizministerium: 148 chinesische Staatsangehörige, die in Fälle von Kryptowährungsbetrug verwickelt sind, wurden ausgeliefert.

  2. Talis-Protokoll-Marktvertrag angegriffen, etwa 5.700 treuhänderisch verwahrte NFTs gestohlen.

    PANews 2. November Nachricht: Talis Protocol veröffentlichte eine Offenlegung, dass am 31. Oktober ein Angreifer eine Schwachstelle in seinen Marktplatz- und Au...

  3. Was ist EIP-7702? Das Ethereum-Upgrade hinter dem Binance-Hack-Vorfall

    EIP-7702 ermöglicht regulären Ethereum-Wallets, Smart-Contract-Code auszuführen, wodurch Batch-Transaktionen und gesponserte Transaktionen (Übernahme der Gas-Ge...

  4. Analyse: Binance-Hacker wusch innerhalb von zwei Tagen etwa 242 Millionen US-Dollar über Tron.

  5. He Yi dementiert das Gerücht, dass „die Beziehung eines Binance-Ingenieurs zu einem nordkoreanischen Spion zu einem Diebstahl geführt habe“.