Binance’s preliminary report says the attackers gained unauthorized access to its internal wallet-signing service and used the EIP-7702 authorization mechanism to transfer assets. The company said it found no evidence that wallet private keys were directly exposed. The FBI attributed the incident to a North Korea-linked organization.
This is more concerning than “private keys were stolen”: if the internal permission chain is compromised, hackers may not even need to steal private keys. Binance’s commitment to cover the losses is certainly important, but users should be asking a more pressing question: Is a platform’s ability to absorb $6.3 billion in losses proof of its strength, or does it reveal a level of centralization risk that makes it too big to fail?
$BNB $BTC #币安安全事件 #交易所安全 #币安10·30安全事件调查报告
This is more concerning than “private keys were stolen”: if the internal permission chain is compromised, hackers may not even need to steal private keys. Binance’s commitment to cover the losses is certainly important, but users should be asking a more pressing question: Is a platform’s ability to absorb $6.3 billion in losses proof of its strength, or does it reveal a level of centralization risk that makes it too big to fail?
$BNB $BTC #币安安全事件 #交易所安全 #币安10·30安全事件调查报告
