Security· ★★★· neutral·

Developer says Binance hacker may have leaked IP via MetaMask Gas Station

  • —Wallet 0xAa24…54a0 received 175M USDT, then 2 ETH for gas
  • —Two minutes later gas was paid via MetaMask Gas Station despite sufficient ETH
  • —Same block included an unlimited USDT approval to the Kyber Network router
  • —It is the only checked attacker wallet showing Gas Station use
Why it matters: If MetaMask retained its logs, investigators could obtain an IP address and move closer to identifying the hacker behind the multi-billion-dollar theft.
Source: ChainCatcher 链捕手