Slow Fog Founder: The Binance theft was due to an APT attack and should not be solely blamed on the engineers

The founder of the blockchain security company Slow Mist, Yu Xian, posted on the X platform stating that many people, after watching the disclosure of the theft process by Binance, believe that the involved engineer made basic mistakes and had excessive permissions.

Yu Xian indicated that such incidents belong to Advanced Persistent Threats (APT), involving human exploitation, intelligence reconnaissance, evasion of malicious code, trust chain exploitation, targeted lateral poisoning, cloud environment penetration, risk control bypass, and 0-day vulnerabilities, among other aspects. One cannot only focus on the initial social engineering phase.