[Binance Hacker Suspected of Using MetaMask for Gas Payment, Possibly Leaving IP Records] BlockBeats reports that on October 30th, Binance's hot wallets were hacked early this morning. Protocol engineer Justin Kalland, after examining the attacker's wallets, discovered a possible glaring error. One wallet received 175 million USDT and had already transferred 2 ETH to prepare for gas, yet it still used MetaMask's gas station, incurring an additional 127.67 USDT in fees. In the same block, the ETH that MetaMask advanced for it perfectly matched the gas limits of the following two transactions, down to the wei. Kalland speculates that the attacker, in their haste, didn't notice that USDT was selected as the gas payment method; MetaMask sometimes defaults to this setting. Crucially, these types of transactions go through MetaMask's own service, not ordinary nodes, potentially leaving off-chain records such as IP addresses with MetaMask. [Original Link]