Binance

Record description

Binance is a cryptocurrency exchange that published an initial report on the October 29, 2026 compromise of its wallet-signing infrastructure. Its own chronology places an internal AI tool in an October 20 lateral-movement chain between compromised engineer workstations. It does not publish the model, prompts or action trace, so the tool's precise causal contribution and autonomy cannot be determined from that statement.

The recorded financial effect instead followed compromise of deployment credentials, malicious container access to the signing service and unauthorized blockchain operations. Ethereum EIP-7702 delegation remained usable beyond the exchange's ordinary withdrawal suspension. Binance reported approximately $6.34 billion of affected assets and $2.85 billion frozen or intercepted at the November 3 snapshot; these are dated categories, not a final independently reconciled net loss. Blockaid's on-chain reconstruction helps identify one effective delegation among nonce-candidate entries. The Binance Case links the two evidentiary layers and persistent delegated authority. Chainalysis has expressly said its separate intrusion is unrelated.

Explicitly related research (2)

Declared connections