Skip to main content
727 Finance
English

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

Related news

  1. Madagascar Ministry of Justice: 148 Chinese nationals involved in cryptocurrency fraud cases have been extradited.

  2. Talis Protocol market contract attacked, approximately 5,700 escrowed NFTs stolen.

    PANews November 2 news: Talis Protocol posted a disclosure that on October 31, an attacker exploited a vulnerability in its marketplace and auction contracts on...

  3. What Is EIP-7702? The Ethereum Upgrade Behind the Binance Hack Incident

    EIP-7702 allows regular Ethereum wallets to run smart contract code, thereby enabling batch transactions and sponsored transactions (paying Gas fees on behalf o...

  4. Analysis: Binance hacker laundered approximately $242 million through Tron within two days.

  5. He Yi denies rumor that "Binance engineer's relationship with North Korean spy led to theft"