Hacking News
Binance Breach Points Identified After Initial Suspicions
Binance has identified additional breach points in the approximately $6 billion hack after initially suspecting a compromised employee laptop. The exchange has not disclosed what those additional breach points were. Investigators traced links to earlier hacks, including the September $388 million Bitget hack. Binance said no evidence of wallet private-key leakage was found, but attackers used EIP-7702 to delegate control of a Binance hot wallet to a malicious contract, allowing unauthorized withdrawals. The attackers conducted preliminary transactions and deployed malicious code before the main withdrawals, which took place within 20 minutes across multiple blockchains including Ethereum, Bitcoin, Tron, Solana, and the XRP Ledger.