October Binance Security Incident: Initial Findings and Response Update

Absolutely stunning that a private company has the free cash to repay and absorb a loss of $6.3 billion. I'm clearly in the wrong business.

	▲	dalant979 an hour ago \| parent \| next [-]
		They don't have to cover $6.3 billion. Most of the stable coins were caught and frozen. Also part will be covered by insurance, so they just need to cover the gap.
	▲	gizajob 2 hours ago \| parent \| prev [-]
		*had

▲

dboreham an hour ago | parent | prev | next [-]

They still don't say how the ability to subvert a production container allowed the attacker to then subvert a fancy EIP-7702 MPC signature scheme that is supposed to depend on multiple parties (the whole idea being that if one party is breached the scheme remains trusted).

"the attacker logged onto Software Engineer C’s computer, used the credentials stolen from Wallet DevOps Engineer A, deployed a container, and triggered a malicious script to launch the attack."

▲

elffjs 6 hours ago | parent | prev | next [-]

Interview malware, again.

▲

ChrisArchitect 4 hours ago | parent | prev [-]

[dead]