Site menu
Back to news

ImportantPANews

Blockaid CEO: Binance Hack Incident Likely Stemmed From Compromised Signing System, Not Private Key Theft

In response to the recent Binance hacking incident, a relevant lead from a security firm has disclosed preliminary speculation on the attack path. <p>Blockaid CEO Ido Ben-Natan pointed out that the core cause of this attack is most likely a compromise of the platform's signing system, rather than the direct theft of private keys from the exchange's cold/hot wallets as previously speculated by external parties.</p><p>The attacker's specific operational method is suspected to have bundled 50 EIP-7702 authorizations into a single transaction, taking over Binance-related wallets through this method and subsequently transferring assets.</p><p>As of now, Binance has not issued an official confirmation announcement regarding specific technical details of this attack or the actual scale of losses. The full investigation of the incident is still ongoing. Users are advised to remain vigilant against the spread of related false information and conduct proper security verification for their own assets.</p>

  • #Hack

More flash news

View all

SlowMist CISO recommends investigating the Binance theft incident around the private key leakage chain and abnormal withdrawal tools

Professional security guidance has been provided for the traceability investigation of the Binance theft incident.<p>Combined with past security forensics experience, SlowMist Chief Information Security Officer 23pds pointed out that in this one-time Binance asset theft incident, the attacker was able to bypass the platform's risk control system. At present, it is still critical to confirm whether the intrusion path stems from private key leakage or a compromised signing machine, and he personally leans toward the private key leakage hypothesis.</p><p>The security expert also assessed that the attacker most likely used a customized withdrawal tool to complete the asset transfer operation.</p><p>For subsequent traceability and forensics work, he recommended that the platform's security department focus its core investigation efforts on mapping the full chain of private key leakage, as well as identifying and tracing the characteristics of abnormal withdrawal tools, to more efficiently locate the attack source and recover the stolen assets.</p>

Coinbase CEO: Actively Blocking Transfers to Compromised Wallets, and Has Reached Out to Binance to Offer Assistance

Coinbase CEO Brian Armstrong stated that the team is making every effort to address the current situation, including blocking transfers to compromised wallets, and has contacted Binance to offer support. Armstrong noted that moments like this require collective industry-wide effort, with the top priority being to openly share useful information and help protect customers, regardless of which platform they use. He also added that the crypto industry has weathered many difficult periods and emerged stronger each time, and this instance will be no exception.

Blockaid CEO: Binance Hack Incident Likely Stemmed From Compromised Signing System, Not Private Key Theft | CoinByte