SlowMist CISO: Binance Asset Theft Incident May Involve Private Key Leakage; Recommends Focused Investigation on Private Key Leakage Pathways and Suspicious Withdrawal Tools
According to TechFlow, on October 30, SlowMist's Chief Information Security Officer 23pds stated that, based on historical forensic experience, given that Binance's assets were transferred in a single batch and attackers bypassed risk control systems, it remains to be closely verified whether the intrusion vector was a private key leak or a compromised signing machine. He personally favors the private key leak hypothesis and believes it is highly probable that the attacker utilized customized withdrawal tools. It is advised that security departments prioritize investigating private key leak pathways and identifying relevant features of anomalous withdrawal tools during tracing and forensic analysis.