🚨 BINANCE HACK: HOW DID THE ATTACKER GET ACCESS?
Guys, the on-chain details are revealing something serious about the Binance hot wallet exploit. 👀
At 20:21 UTC, a transaction gave the attacker access to Hot Wallet 14's signing power.
Here’s what makes this incident interesting:.
🔴 50 Authorizations: The transaction carried 50 authorizations, all signed using the wallet's own key...
🔴 Consecutive Nonces: These signatures covered nonces from 18,914,775 to 18,914,824. Only the authorization matching the wallet's next nonce was executed...
🔴 Attacker's Address: The sender "0x7c86…5ca0" is now labeled "Binance Hot Wallet Exploiter" on Etherscan...
🔴 Tornado Cash Connection: Part of the attacker's gas funding came through three withdrawals from Tornado Cash's 0.1 ETH pool. The first withdrawal happened on October 28, around 37 hours before the attack.
⚠️ THE BIGGEST CONCERN:
The attacker appears to have gained the ability to trigger signatures from Binance's own wallet key, making this incident much more concerning than an ordinary wallet transfer...
📊 Around 94% of the Ethereum-denominated funds are reportedly still frozen or pinned.
The on-chain investigation is still worth watching closely.
What do you think, guys? Was this a key-management failure or something more complicated?
Follow me for more updates on the Binance hack and on-chain investigation.
#Binance #CryptoSecurity #Blockchain #Ethereum #CryptoNews $BTC
Guys, the on-chain details are revealing something serious about the Binance hot wallet exploit. 👀
At 20:21 UTC, a transaction gave the attacker access to Hot Wallet 14's signing power.
Here’s what makes this incident interesting:.
🔴 50 Authorizations: The transaction carried 50 authorizations, all signed using the wallet's own key...
🔴 Consecutive Nonces: These signatures covered nonces from 18,914,775 to 18,914,824. Only the authorization matching the wallet's next nonce was executed...
🔴 Attacker's Address: The sender "0x7c86…5ca0" is now labeled "Binance Hot Wallet Exploiter" on Etherscan...
🔴 Tornado Cash Connection: Part of the attacker's gas funding came through three withdrawals from Tornado Cash's 0.1 ETH pool. The first withdrawal happened on October 28, around 37 hours before the attack.
⚠️ THE BIGGEST CONCERN:
The attacker appears to have gained the ability to trigger signatures from Binance's own wallet key, making this incident much more concerning than an ordinary wallet transfer...
📊 Around 94% of the Ethereum-denominated funds are reportedly still frozen or pinned.
The on-chain investigation is still worth watching closely.
What do you think, guys? Was this a key-management failure or something more complicated?
Follow me for more updates on the Binance hack and on-chain investigation.
#Binance #CryptoSecurity #Blockchain #Ethereum #CryptoNews $BTC
