Ir para o conteúdo principal
727 Finance
Português (Brasil)

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

Notícias relacionadas

  1. Ministério da Justiça de Madagascar: 148 cidadãos chineses envolvidos em casos de fraude com criptomoedas foram extraditados.

  2. Contrato de mercado do Protocolo Talis sofreu ataque, aproximadamente 5.700 NFTs em custódia foram roubados.

    PANews, 2 de novembro: A Talis Protocol publicou um comunicado informando que, em 31 de outubro, um atacante explorou uma vulnerabilidade em seus contratos de m...

  3. O que é o EIP-7702? A atualização do Ethereum por trás do incidente de hack da Binance

    EIP-7702 permite que carteiras Ethereum regulares executem código de contrato inteligente, possibilitando assim transações em lote e transações patrocinadas (pa...

  4. Análise: hacker da Binance lavou aproximadamente US$ 242 milhões via Tron em dois dias.

  5. He Yi nega boato de que "o relacionamento de um engenheiro da Binance com um espião norte-coreano levou a roubo"