Langkau ke kandungan utama
727 Finance
Bahasa Melayu

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

Berita berkaitan

  1. Kementerian Kehakiman Madagascar: 148 warga China yang terlibat dalam kes penipuan mata wang kripto telah diekstradisi.

  2. Kontrak pasaran Talis Protocol diserang, kira-kira 5,700 NFT yang dipegang dalam eskrow dicuri.

    PANews 2 November: Talis Protocol mengeluarkan pendedahan bahawa pada 31 Oktober, seorang penyerang mengeksploitasi kelemahan dalam kontrak marketplace dan lelo...

  3. Apakah EIP-7702? Peningkatan Ethereum di Sebalik Insiden Penggodaman Binance

    EIP-7702 membolehkan dompet Ethereum biasa menjalankan kod kontrak pintar, sekali gus membolehkan transaksi kelompok dan transaksi tajaan (membayar yuran Gas ba...

  4. Analisis: Penggodam Binance telah melaburkan kira-kira $242 juta melalui Tron dalam tempoh dua hari.

  5. He Yi menafikan khabar angin bahawa "hubungan jurutera Binance dengan perisik Korea Utara menyebabkan kecurian"