Hoskinson Share Analysis of Binance Wallet Attack

Charles Hoskinson don share one technical analysis of the attack wey happen for Binance Ethereum wallets, as e warn about dangerous code wey dem associate with how crypto assets dey move.

The Cardano founder reply one post by CyberSatoshi, wey examine reconstructed code wey link to Binance 14, one of the exchange hot wallets. The analyst describe one program wey dem dey use transfer assets and talk say e design follow the wallet operations.

“Make una careful, some seriously dangerous code dey out there,” na so Hoskinson write beside the analysis.

Reconstructed Code Examine Binance 14 Transfers

CyberSatoshi analyze one reconstructed version of a sweeper, program wey dem design to move assets from account. The analyst argue say the code tailor to Binance 14 and e highlight several functions wey involve for transferring ETH and tokens.

One part of the program dey leave one ETH inside the wallet when e dey transfer im native balance. CyberSatoshi suggest say this fit keep Binance automated transaction queue supplied with gas, make insufficient-funds error no trigger alert.

The post still describe one loop wey dey check token balances and fit continue to process assets even if one individual transfer fail. CyberSatoshi identify another function wey fit call external account through Binance 14.

Hoskinson share the analysis without talk which of the conclusions wey e support. Im message no include any comparison between Cardano and Ethereum transaction models.

ADBREAK]

How EIP-7702 Delegation Was Used

The attack involve EIP-7702, Ethereum mechanism wey allow account wey private key dey control to delegate execution to smart contract code. Delegation fit give the account access to functions like to perform several operations inside one transaction.

Valid authorization wey the account sign dey required to establish that delegation. Security firm Blockaid report say Binance signing infrastructure, under the attacker control, sign authorization wey direct Binance 14 to one sweeper wey the attacker deploy.

CyberSatoshi argue say the mechanism speed up asset movement after dem obtain authorization. The analyst describe one batch of 50 signed authorizations with consecutive nonce values. Nonce na counter wey Ethereum dey use for transaction and authorization process.

Blockaid estimate say approximately $2.5 billion transfer comot from Binance 14 for the initial transaction. The firm still trace outflows from other Binance wallets across multiple blockchain networks.

[NEWSBREAK]

Binance Investigation and the Second Account

Binance estimate say approximately $6.3 billion in assets dey affected by the broader incident. The exchange report say investigators dey examine one employee laptop wey fit don compromise and additional points of breach.

Blockaid analysis trace another transfer go separate Binance-owned smart account. According to the firm, the attacker reach that account through Binance 14, wey remain delegated to the attacker code after the initial transfer.