Technical Mechanism and Attack Vector

The incident was not a simple wallet private-key leak, but rather a complex, multi-stage attack. Investigators believe the initial entry point was a compromised DevOps engineer's laptop, which enabled unauthorized access to internal infrastructure and subsequent manipulation of the exchange's transaction-signing services.

The top 3

1. Evidence of Signing Infrastructure Manipulation: Security firm Blockaid identified that the attacker utilized EIP-7702 authorizations to delegate account execution to an unverified 'sweeper' contract. This allowed the attacker to drain assets by tricking the signing infrastructure into approving malicious transactions, rather than stealing the private key itself.

Sources

• Cointelegraph
• Cointelegraph
• Cointelegraph
• Cointelegraph

Open the full topic