Binance Hack Timeline maps attacker actions from June to October, detailing how three engineers were compromised to reach the wallet signing service. The timeline shows download of malicious tools, use of internal AI, and deployment of a container to trigger unauthorized transfers.
Key points
June: Wallet DevOps Engineer A downloaded a tampered Homebrew installer while setting up an AI coding tool.
September: Engineer B downloaded a malicious code repository during a fake job interview, compromising his work computer.
October 20: Attackers used the compromised device and an internal AI tool to gain control over Engineers A and C, discovering a container deployment permission token on A’s computer.
October 29: They accessed C’s computer, used credentials stolen from A to deploy a container, execute a malicious script, and initiate unauthorized asset transfers through Binance’s internal wallet signing service.
Sources
Bitcoin Core Config Generator compatible with v32.1 release
Bitcoin Core Config Generator is now compatible with the latest release, v32.1. The update adds support for the newest Bitcoin Core version.
Key points
- Compatibility: works with Bitcoin Core v32.1
Sources
- Original post
- jlopp.github.io - Linked in the post
Equity perps begin trading on CFTC registered exchanges
Equity perps can begin trading for the first time on CFTC registered exchanges. The tweet links the launch to a commitment to keep markets innovative, liquid, and well-regulated.
Key points
Launch: equity perps can begin trading for the first time on CFTC registered exchanges
Claim: reflects a commitment to keep markets innovative, liquid, and well-regulated