Binance Incident Report: A Fake Job Interview, a Hijacked Signing Service and a Delegation Trick

Binance's first incident report traces the $6.34 billion theft to a tampered developer tool, a fake job interview and a hijacked signing service, and says 98% of affected assets are replenished. Binance published its first incident report on Tuesday, saying the October 29 theft of about $6.34 billion in digital assets was the end of a months-long campaign that began with a tampered developer tool and a fake job interview. The exchange says attackers took control of an internal wallet signing service, then used an Ethereum feature called EIP-7702 to keep moving funds after withdrawals were halted.