SlowMist CISO: Binance Asset Theft Incident May Involve Private Key Leakage; Recommends Focused Investigation on Private Key Leakage Pathways and Suspicious Withdrawal Tools

SlowMist Chief Information Security Officer 23pds stated that, based on historical forensic experience, the one-time transfer of Binance's assets indicates the attacker successfully bypassed the risk control system. Whether the intrusion vector involved a leaked private key or compromised signing machines still requires priority verification. He personally leans toward the private key leakage hypothesis and believes the attacker most likely employed custom-built withdrawal tools. He advises security teams to prioritize investigating private key leak pathways and anomalies associated with unauthorized withdrawal tools during attribution and forensic investigations.