Security · High impactFan score 5 · Tier D2 sources
After Binance, check what your signing systems can approve
The Brief
- Hackers stole about $6.3 billion from Binance in an October 2026 incident, according to Bloomberg citing Blockaid.
- Blockaid says about $2.5 billion, or roughly 40% of the total, was taken in a single Ethereum transaction.
- The transaction used wallet permissions that reportedly cost $15 to set up.
Why it matters
Valid signatures can grant an attacker wallet authority, so monitoring only transfers and ownership changes may miss this kind of theft. Teams holding user funds need to check what their signing systems are able to approve.
Who’s affected
- Organizations holding user funds
- Teams operating signing systems or wallet permissions
What to do
- Check what your signing systems can approve, including wallet permissions that grant authority over funds
- #crypto-security
- #binance
- #ethereum
- #wallet-permissions
- #signing-systems
Binance’s October 2026 security incident raises an operational question for every organization holding user funds: Can your security controls recognize when a valid signature grants an attacker wallet authority? If an organization only monitors transfers and ownership changes, it…