The $6.3 billion Binance crypto heist has been fully reimbursed, but reading how it happened sent chills down my spine 👍👍
The announcement came out last night: the $6.34 billion shortfall has been covered with Binance’s own funds and SAFU. Users didn’t lose a cent, and a new PoR has been published.
But how it happened is more worth looking at than how much was stolen.
These attackers spent four months targeting them. In June, they planted malware on an engineer’s computer. In September, a fake recruiter reached out about a “remote interview.” In the second round, they were asked to run an “assignment” that contained malicious code. In October, the attackers used an internal AI tool as a stepping stone to access the wallet-signing service. On the night of the attack, they used EIP-7702 to delegate control of the hot wallet to a hacker contract. Even suspending withdrawals couldn’t stop them, because the on-chain authorization had already taken effect.
The money laundering was just as brutal: 20,000 addresses and 65,000 transfers in one week, switching every 30 seconds.
Honestly, the one thing I took away from this is that keeping your private keys safe isn’t enough to guarantee security. If someone gets hold of your signing authority, it’s no different from losing your keys. Don’t keep large amounts in hot wallets; use hardware signing. Don’t connect to unfamiliar links, don’t run interview “assignments,” and pause for three seconds when an Approve prompt pops up.
Security reminder; not an endorsement of any platform
$BNB
$NVDAB
#Bitmine2026财年净亏损63亿美元 #英伟达任命Kress为临时CEO
The announcement came out last night: the $6.34 billion shortfall has been covered with Binance’s own funds and SAFU. Users didn’t lose a cent, and a new PoR has been published.
But how it happened is more worth looking at than how much was stolen.
These attackers spent four months targeting them. In June, they planted malware on an engineer’s computer. In September, a fake recruiter reached out about a “remote interview.” In the second round, they were asked to run an “assignment” that contained malicious code. In October, the attackers used an internal AI tool as a stepping stone to access the wallet-signing service. On the night of the attack, they used EIP-7702 to delegate control of the hot wallet to a hacker contract. Even suspending withdrawals couldn’t stop them, because the on-chain authorization had already taken effect.
The money laundering was just as brutal: 20,000 addresses and 65,000 transfers in one week, switching every 30 seconds.
Honestly, the one thing I took away from this is that keeping your private keys safe isn’t enough to guarantee security. If someone gets hold of your signing authority, it’s no different from losing your keys. Don’t keep large amounts in hot wallets; use hardware signing. Don’t connect to unfamiliar links, don’t run interview “assignments,” and pause for three seconds when an Approve prompt pops up.
Security reminder; not an endorsement of any platform
$BNB
$NVDAB
#Bitmine2026财年净亏损63亿美元 #英伟达任命Kress为临时CEO