Binance just released news on how the hack was possible, I summarized it so that you wouldn’t have to read all that: Attackers used a fake job interview to trick an engineer into downloading malware disguised as a developer tool. They then used the compromised computer and an internal AI tool to gain access to other employees’ systems and a deployment token. On 29 October, they used stolen credentials to reach Binance’s wallet-signing service and initiate transfers outside the normal withdrawal process. They also used Ethereum’s EIP-7702 mechanism to create on-chain permissions that let them keep moving assets even after withdrawals were suspended. New measures taken by Binance: * Rebuilt the affected wallet system and internal AI tool in new environments. * Replaced affected devices and revoked related credentials and tokens. * Scanned employee devices more thoroughly. * Tightened wallet-service risk controls and added AI-based behavioural anomaly detection. * Closed the identified attack entry points and worked with law enforcement and industry partners to trace and freeze assets. * Replenished 98% of impacted token assets as of 31 October, with the remaining illiquid assets still being purchased.