🚨 Details of the Binance hack have emerged — hackers likely gained access to the transaction signing system through a DevOps engineer's laptop, allowing them to penetrate the service container and initiate fund withdrawals without stealing private keys.
To 🔫 one of the hot Ethereum wallets, the perpetrators used the EIP-7702 mechanism from the Pectra update — they had prepared 50 signed permissions with sequential numbers in advance, one of which triggered and transferred control of the wallet to a malicious smart contract.
Within just three minutes, the contract withdrew 167,464 ETH, $1.615 billion USDT, and over 60 other tokens.
At the same time, hackers drained Binance wallets across nine other blockchains using ordinary transactions with valid signatures — analysts at TRM Labs believe that the perpetrators gained the ability to use Binance's signing system across multiple networks, but the exact method of compromising the infrastructure is still under investigation.
Private Alpha VIP 🪙
