Binance explained how the $6,300,000,000 heist happened:
- Hackers contacted Binance employees by arranging fake job interviews.
- They made one of the employees download a project file containing malware as part of his job application.
— Thanks to this software, they penetrated the employee's computer and gained remote access.
- They accessed other employees' systems using Binance's internal AI tool through the captured computer.
- They gained access to the wallet infrastructure by obtaining employee access and permission information.
- They made transactions that exceeded normal withdrawal procedures using Binance's transaction signing system.
- They transferred cryptocurrencies independently of hot wallets by abusing Ethereum's EIP-7702 mechanism.