According to your preliminary information, the shocking vulnerability of up to $6.3 billion was actually caused by the hacking of a 'development operation and maintenance engineer's laptop'. As a top security compliance exchange that manages hundreds of billions of dollars in assets and is known as the world's top security compliance exchange, why can an ordinary employee's terminal computer be directly connected to the core service container and submit unauthorized huge withdrawals? Doesn't your core system have a Zero Trust architecture and M-of-N Multisig? Is this the systematic collapse of the technical architecture, or the virtual internal control management?
According to your preliminary information, the shocking vulnerability of up to $6.3 billion was actually caused by the hacking of a 'development operation and maintenance engineer's laptop'. As a top security compliance exchange that manages hundreds of billions of dollars in assets and is known as the world's top security compliance exchange, why can an ordinary employee's terminal computer be directly connected to the core service container and submit unauthorized huge withdrawals? Doesn't your core system have a Zero Trust architecture and M-of-N Multisig? Is this the systematic collapse of the technical architecture, or the virtual internal control management?
According to your preliminary information, the shocking vulnerability of up to $6.3 billion was actually caused by the hacking of a 'development operation and maintenance engineer's laptop'. As a top security compliance exchange that manages hundreds of billions of dollars in assets and is known as the world's top security compliance exchange, why can an ordinary employee's terminal computer be directly connected to the core service container and submit unauthorized huge withdrawals? Doesn't your core system have a Zero Trust architecture and M-of-N Multisig? Is this the systematic collapse of the technical architecture, or the virtual internal control management?
Investigation update: Our initial investigation suggested that the security incident may have involved a compromised laptop, however our subsequent investigation has uncovered additional points of breach.
This was a complex attack, and we are doing all we can in coordination with law enforcement to resolve it. We are still gathering the facts, and will share more directly as we have them.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe.
We are still on track towards the expected timeline to resume the withdrawal service in 45 hours. Deposits remain unaffected.
The outflows ceased when we paused withdrawal service earlier. We are still working with partners to freeze many of the impacted assets, and have frozen around $3 billion thus far.
We will continue to provide further updates through official Binance channels as more verified information becomes available.
According to your preliminary information, the shocking vulnerability of up to $6.3 billion was actually caused by the hacking of a 'development operation and maintenance engineer's laptop'. As a top security compliance exchange that manages hundreds of billions of dollars in assets and is known as the world's top security compliance exchange, why can an ordinary employee's terminal computer be directly connected to the core service container and submit unauthorized huge withdrawals? Doesn't your core system have a Zero Trust architecture and M-of-N Multisig? Is this the systematic collapse of the technical architecture, or the virtual internal control management?
According to your preliminary information, the shocking vulnerability of up to $6.3 billion was actually caused by the hacking of a 'development operation and maintenance engineer's laptop'. As a top security compliance exchange that manages hundreds of billions of dollars in assets and is known as the world's top security compliance exchange, why can an ordinary employee's terminal computer be directly connected to the core service container and submit unauthorized huge withdrawals? Doesn't your core system have a Zero Trust architecture and M-of-N Multisig? Is this the systematic collapse of the technical architecture, or the virtual internal control management?
According to your preliminary information, the shocking vulnerability of up to $6.3 billion was actually caused by the hacking of a 'development operation and maintenance engineer's laptop'. As a top security compliance exchange that manages hundreds of billions of dollars in assets and is known as the world's top security compliance exchange, why can an ordinary employee's terminal computer be directly connected to the core service container and submit unauthorized huge withdrawals? Doesn't your core system have a Zero Trust architecture and M-of-N Multisig? Is this the systematic collapse of the technical architecture, or the virtual internal control management?
Investigation update: Our initial investigation suggested that the security incident may have involved a compromised laptop, however our subsequent investigation has uncovered additional points of breach.
This was a complex attack, and we are doing all we can in coordination with law enforcement to resolve it. We are still gathering the facts, and will share more directly as we have them.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe.
We are still on track towards the expected timeline to resume the withdrawal service in 45 hours. Deposits remain unaffected.
The outflows ceased when we paused withdrawal service earlier. We are still working with partners to freeze many of the impacted assets, and have frozen around $3 billion thus far.
We will continue to provide further updates through official Binance channels as more verified information becomes available.
Binance promised to ”pay in full and secure user funds“, which made people feel relieved and proved that it was ”Too Big to Fail“; however, the market panic collapse, contract bursts and withdrawal suspension caused by the incident was still a disaster for retail investors. Although there are many numbers in the account, the actual value of assets has been smashed out of the deep pit. This sense of powerlessness of being passively beaten is very real.
这种“主动伸出援手”不仅建立了行业责任感,更在无形中确立了一种“安全法官 / 行业大哥”的心理位阶
This kind of "actively lending a hand" not only establishes a sense of responsibility in the industry, but also invisibly establishes a psychological position of "security judge/industry big brother".