Перейти к основному содержимому
727 Finance
Русский

SlowMist CISO suggests investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools.

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

PANews October 30 news: 23pds, Chief Information Security Officer of SlowMist, posted: "Regarding Binance's one-time asset theft incident this time, combined with historical forensic experience, the attacker was able to bypass the risk control system. Whether its intrusion path was private key leakage or the signing machine being compromised still needs to be confirmed as a priority. I personally lean more toward the hypothesis of private key leakage. In addition, the attacker most likely used customized withdrawal tools. It is recommended that the security department, during traceability and forensics, focus on conducting in-depth investigation around the private key leakage chain and the characteristics of the anomalous withdrawal tools."

Похожие новости

  1. Министерство юстиции Мадагаскара: экстрадированы 148 граждан Китая, причастных к делам о мошенничестве с криптовалютами.

  2. Рыночный контракт Talis Protocol подвергся атаке, похищено около 5 700 NFT, находившихся в эскроу.

    PANews, 2 ноября. Talis Protocol опубликовал раскрытие информации о том, что 31 октября злоумышленник использовал уязвимость в контрактах его маркетплейса и аук...

  3. Что такое EIP-7702? Обновление Ethereum, стоящее за инцидентом со взломом Binance

    EIP-7702 позволяет обычным кошелькам Ethereum выполнять код смарт-контрактов, тем самым обеспечивая пакетные транзакции и спонсируемые транзакции (оплата комисс...

  4. Анализ: хакер Binance отмыл около 242 миллионов долларов через Tron в течение двух дней.

  5. Хэ И опровергает слух о том, что «отношения инженера Binance с северокорейским шпионом привели к краже»