Waking up to see the announcement that Binance had been hacked and reading the report left me with mixed feelings. I never imagined that one employee’s computer could have such extensive access—it sent a chill down my spine.

This is the most critical point: don’t employees receive regular security training? I find that hard to believe. A company like Binance must provide it, but perhaps its assessments and checks need to be strengthened.

Also, why use a work computer to handle personal matters? Back when I worked in Web2, my boss wouldn’t let us use company computers or handle personal matters during work hours. I thought that was excessive at the time, but in Web3, rules like these are necessary.

I always thought that employees at Binance could use their work computers only for work-related tasks, and that those computers were connected to the internal network.

In my personal opinion, future large withdrawals should require multiple environments, multiple people, and role-based separation of duties. A single work computer shouldn’t be able to complete the entire process. —He Yi

The above reflects only my personal opinions and experience, and does not constitute investment advice.