[Analysis: Suspected Binance Attacker Mistakenly Used MetaMask for Gas Payment, Possibly Leaving Traceable Logs] BlockBeats reported on October 30th that protocol engineer Justin Kalland stated that an address suspected of being involved in a Binance hot wallet attack transferred approximately 175 million USDT to a new wallet, and then received 2 ETH about 2.5 minutes later. Despite having sufficient gas, the address still invoked the MetaMask Gas Station. Within the same block, there were consecutive instances of Gas Station replenishing ETH, unlimited USDT authorization to the Kyber route, and a payment of approximately 127.67 USDT to the Gas Station. The amount of ETH replenished matched the maximum gas budget of both transactions to the microsecond (wei). Analysts pointed out that this might be due to the attacker hastily selecting USDT to pay gas when using the MetaMask wallet. Transactions processed through MetaMask Sentinel use its channel instead of regular RPC, potentially leaving off-chain logs containing information such as IP addresses. Kalland stated that among the wallets examined related to the attack, only this address showed Gas Station usage records, and called on MetaMask to retain relevant Web2 logs. The address involved is 0xAa246BF639586a6Ba46762D378CE50cA4fc654a0.