The $6.3 billion security incident at Binance has raised unresolved questions about the exchange’s hot-wallet management and measures to restrict attackers’ access. Binance said the attackers exploited an internal wallet-signing service to transfer funds outside the normal withdrawal process. CertiK analyst Jonathan Reese said blockchain records show the transfers, but it is impossible to determine which internal controls governed them. Reese said the attackers repeatedly drained an Ethereum hot wallet, doing so again whenever new deposits arrived. Binance did not respond to questions about wallet balances and safeguards.