پرش به محتوای اصلی
727 Finance
فارسی

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

اخبار مرتبط

  1. وزارت دادگستری ماداگاسکار: ۱۴۸ تبعه چینی که در پرونده‌های کلاهبرداری با ارزهای دیجیتال دخیل بودند، مسترد شده‌اند.

  2. قرارداد بازار پروتکل Talis مورد حمله قرار گرفت، تقریباً ۵,۷۰۰ توکن غیرقابل تعویض (NFT) سپرده‌شده به سرقت رفت.

    PANews ۲ نوامبر خبر داد: پروتکل Talis افشا کرد که در ۳۱ اکتبر، مهاجمی از یک آسیب‌پذیری در قراردادهای بازار و حراج خود در زنجیره Injective سوءاستفاده کرد و حدود...

  3. EIP-7702 چیست؟ ارتقای اتریوم پشت حادثه هک بایننس

    EIP-7702 به کیف‌پول‌های معمولی اتریوم اجازه می‌دهد کد قرارداد هوشمند را اجرا کنند، و از این طریق تراکنش‌های دسته‌ای و تراکنش‌های حمایت‌شده (پرداخت هزینه گس به ن...

  4. تحلیل: هکر بایننس در عرض دو روز حدود ۲۴۲ میلیون دلار را از طریق ترون پولشویی کرد.

  5. هی یی شایعه «رابطه مهندس بایننس با جاسوس کره شمالی منجر به سرقت شد» را تکذیب کرد