Vai al contenuto principale
727 Finance
Italiano

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

Notizie correlate

  1. Ministero della Giustizia del Madagascar: 148 cittadini cinesi coinvolti in casi di frode con criptovalute sono stati estradati.

  2. Il contratto di mercato di Talis Protocol è stato attaccato, circa 5.700 NFT in escrow sono stati rubati.

    PANews 2 novembre: Talis Protocol ha pubblicato una comunicazione secondo cui il 31 ottobre un attaccante ha sfruttato una vulnerabilità nei suoi contratti di m...

  3. Che cos'è EIP-7702? L'aggiornamento di Ethereum dietro l'incidente di hacking di Binance

    EIP-7702 consente ai portafogli Ethereum regolari di eseguire codice di smart contract, abilitando così transazioni batch e transazioni sponsorizzate (pagamento...

  4. Analisi: l'hacker di Binance ha riciclato circa 242 milioni di dollari attraverso Tron in due giorni.

  5. He Yi nega la voce secondo cui "la relazione di un ingegnere di Binance con una spia nordcoreana avrebbe portato al furto"