"The $6.36 Billion Crypto Theft in History: TRM Explains How North Korean Hackers Infiltrated Binance's Hot Wallet Signature System" (by TRM Team) This article reconstructs the technical path of the theft of approximately $6.36 billion in assets from Binance by analyzing fund transfer records on ten blockchains. The core finding is that the attackers used EIP-7702 pre-signature authorization to take over the Ethereum hot wallet, while simultaneously transferring assets on nine other chains using regular signatures. TRM believes this indicates that the attackers may have gained control over Binance's hot wallet signature infrastructure, rather than exploiting a single smart contract vulnerability. After the fund transfers, the stablecoin issuer and Arbitrum froze approximately $2.7 billion in assets, but the hackers still managed to control approximately $2.4 billion in assets that were difficult for the issuer to freeze directly, through methods such as discounted USDT exchanges and ETH lending via Aave. Read the full article: https://(wublock123.com)/articles/article-59786