SlowMist CISO: Binance Asset Theft May Involve Private Key Leak; Recommend Focusing on Private Key Leak Paths and Abnormal Withdrawal Tools

According to TechFlow, on October 30, SlowMist Chief Information Security Officer 23pds said that, based on historical forensic experience, Binance's assets were transferred in a single batch this time, and the attacker was able to bypass the risk control system. It still needs to be confirmed whether the intrusion path was a private key leak or a compromised signing machine. He personally leans toward the private key leak hypothesis and believes the attacker most likely used a customized withdrawal tool. He recommends that the security team focus on investigating private key leak paths and characteristics of abnormal withdrawal tools during traceability and forensics.

Source: TechFlow