Skip to main content
727 Finance
English

Binance: A single compromised employee computer is only the starting point of an attack; attackers often use sophisticated methods to penetrate.

PANews, October 30 news: Binance employee sisi posted an explanation regarding the technical details of the security incident. She stated that a compromised employee computer was the starting point of the attack, but this was not an incident in which funds could be transferred just by breaching one computer; attackers often use sophisticated methods to penetrate, and the company has found important leads and taken measures to control the risk. This was not a case in which the attacker could complete the fund transfer simply by exploiting a certain engineer's permissions, nor was it the result of a single person's one-click operation. At this stage, the investigation has not attributed responsibility to any individual.

sisi reiterated that no evidence of wallet private key leakage has been found so far, user funds are safe, and all stolen losses will be fully covered by the SAFU fund and company funds. About $3 billion in affected assets have been frozen on-chain, and the company is cooperating with law enforcement agencies and blockchain intelligence institutions in the investigation. Deposits remain normal throughout, while withdrawals have been suspended as a precautionary measure and are expected to reopen within 48 hours. Going forward, progress will continue to be shared on the premise of ensuring the accuracy of the investigation, and detailed information and security hardening measures will be announced. According to previous news, Binance disclosed that the security incident may involve the compromise of a DevOps engineer's computer, no private key leakage has been found, and the estimated total loss is about $6.3 billion.

Related news

  1. Madagascar Ministry of Justice: 148 Chinese nationals involved in cryptocurrency fraud cases have been extradited.

  2. Talis Protocol market contract attacked, approximately 5,700 escrowed NFTs stolen.

    PANews November 2 news: Talis Protocol posted a disclosure that on October 31, an attacker exploited a vulnerability in its marketplace and auction contracts on...

  3. What Is EIP-7702? The Ethereum Upgrade Behind the Binance Hack Incident

    EIP-7702 allows regular Ethereum wallets to run smart contract code, thereby enabling batch transactions and sponsored transactions (paying Gas fees on behalf o...

  4. Analysis: Binance hacker laundered approximately $242 million through Tron within two days.

  5. He Yi denies rumor that "Binance engineer's relationship with North Korean spy led to theft"