Tech News
← Home  ·  All topics

Hot Wallet

2 GoKawiil briefs on this topic

Binance $6.3B hack traced to compromised laptop bypassing withdrawal controls

Binance disclosed that attackers, identified by the FBI as North Korea's TraderTraitor group, compromised a developer's laptop to access an internal service container capable of initiating withdrawal requests. The attackers then exploited further weaknesses and an Ethereum account-delegation mechanism to gain transaction approval authority over a hot wallet, draining billions in assets within about 20 minutes. Binance says there is no evidence leaked wallet keys were used, and that the breach involved multiple points of compromise beyond the initial device.

BTCPay Server confirms hot wallet thefts on outdated pre-2.4.2 instances

BTCPay Server's maintainers say attackers have been draining hot wallets from instances running version 2.4.1 or earlier, and are urging all users to upgrade to version 2.4.7. Founder Nicolas Dorier said the attacks exploited vulnerabilities predating version 2.4.2, not public-facing servers, and the project reports no confirmed drains on instances running the latest release.