Binance said the October 29 attack, involving approximately $6.34 billion in digital assets, began with a fake recruitment process. The attacker compromised an employee’s device, then accessed the wallet signing system to transfer assets out of a hot wallet.
According to Binance’s preliminary investigation report, a software engineer downloaded a trojan-infected code repository onto their work computer after a series of fake interviews. The attacker used this device, along with internal AI tools, to infiltrate the computers of two other engineers responsible for wallets and steal deployment credentials.
Binance said the attacker used Ethereum's EIP-7702 delegation mechanism to transfer XRP, SOL, BTC, ETH, and other assets out of the hot wallet. The exchange froze or blocked about $2.85 billion and had recovered 98% of the affected token assets as of October 31.
Binance said it would absorb the losses, had rebuilt the affected systems, and would hire an independent third party to conduct an assessment. The FBI attributed the incident to North Korea.
Source: https://tintucbitcoin.com/tin-chinh-qua-dem-va-sang-nay-3-11-4-11/
Thank you for reading this article!
Like, comment, and follow TinTucBitcoin to stay up to date with the latest cryptocurrency market news and never miss any important information!
$BTC $ETH $BNB $XRP $SOL
