The Binance $6.3 billion theft demonstrates that stealing from an exchange doesn't even require your private key. Unlike the Bybit incident, attackers may not directly steal private keys, but rather gain signature/approval privileges through endpoint intrusion, using the EIP-7702 delegation mechanism to complete bulk asset transfers on-chain. Binance's hot wallet private keys were certainly well protected, but the system with transfer permissions was still compromised by hackers. It seems Ethereum needs to upgrade the security of exchange hot wallets to prevent such mass compromises. For example, setting a daily limit of 10-20% for funds transferred from exchange hot wallets would prevent mass compromises from occurring at the system's root. The GCSA report is quite good. Security agencies need to step up their efforts, especially smaller projects that need more cooperation with security agencies, given the recent thefts of Binance and Polymarket. In the blockchain industry, security is currently prioritized over development. Who knows who Kim Jong-il's next target will be?