Aller au contenu principal
727 Finance
Français

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

Actualités liées

  1. Ministère de la Justice de Madagascar : 148 ressortissants chinois impliqués dans des affaires de fraude aux cryptomonnaies ont été extradés.

  2. Le contrat de marché de Talis Protocol a été attaqué, environ 5 700 NFT sous séquestre ont été volés.

    PANews 2 novembre : Talis Protocol a publié une divulgation selon laquelle, le 31 octobre, un attaquant a exploité une vulnérabilité dans ses contrats de market...

  3. Qu'est-ce que l'EIP-7702 ? La mise à niveau d'Ethereum derrière l'incident de piratage de Binance

    EIP-7702 permet aux portefeuilles Ethereum ordinaires d'exécuter du code de contrat intelligent, permettant ainsi des transactions par lots et des transactions...

  4. Analyse : Le hacker de Binance a blanchi environ 242 millions de dollars via Tron en deux jours.

  5. He Yi dément la rumeur selon laquelle « la relation d'un ingénieur de Binance avec un espion nord-coréen aurait conduit à un vol »