Bonanza Factory: Binance hacker abused internal signing rights, not private keys
- —At least nine Binance hot wallets on ETH, ARB and AVAX were targeted
- —The attack lasted about 20 minutes and blended into normal withdrawal traffic
- —The hacker abused internal signing rights rather than stealing private keys
- —Stolen funds were mixed with Bitget hack proceeds via THORChain in one wallet
Why it matters: The finding that internal signing rights were abused, not private keys, raises questions about exchange security architecture beyond key custody.
Source: Bloomingbit