🚨 Claim going around: $6.3B drained from Binance hot wallets. Treat it as UNVERIFIED until Binance or on-chain trackers confirm.
The alleged attack chain:
🔻 A DevOps engineer's laptop gets compromised
🔻 Attackers reach the withdrawal infrastructure
🔻 Transactions get signed through Binance's own systems
🔻 EIP-7702 delegation hands hot wallet control to a sweeper contract
🔻 About 4 minutes later: 167K $ETH, 1.6B $USDT and 18,270 $BTC reportedly gone
What's still unconfirmed:
⚠️ North Korea attribution
⚠️ The stablecoin to $ETH swaps
⚠️ The total loss figure
What's reportedly been promised: Binance covers every user's funds and publishes proof-of-reserves by Monday, Nov 2.
If it's real, it's an ops-security failure, not a smart contract bug. One compromised endpoint was enough to reach the signing flow.
Don't panic-sell or panic-withdraw off a single post. Check Binance's official channels and Arkham/Etherscan flows first.
Either way, the lesson stands: not your keys, not your coins. Keep long-term bags in self-custody. 🔐
The alleged attack chain:
🔻 A DevOps engineer's laptop gets compromised
🔻 Attackers reach the withdrawal infrastructure
🔻 Transactions get signed through Binance's own systems
🔻 EIP-7702 delegation hands hot wallet control to a sweeper contract
🔻 About 4 minutes later: 167K $ETH, 1.6B $USDT and 18,270 $BTC reportedly gone
What's still unconfirmed:
⚠️ North Korea attribution
⚠️ The stablecoin to $ETH swaps
⚠️ The total loss figure
What's reportedly been promised: Binance covers every user's funds and publishes proof-of-reserves by Monday, Nov 2.
If it's real, it's an ops-security failure, not a smart contract bug. One compromised endpoint was enough to reach the signing flow.
Don't panic-sell or panic-withdraw off a single post. Check Binance's official channels and Arkham/Etherscan flows first.
Either way, the lesson stands: not your keys, not your coins. Keep long-term bags in self-custody. 🔐