BTC $69,330.00 -5.98%
ETH $1,960.89 -4.42%
BNB $638.27 -5.85%
XRP $1.01 -3.33%
SOL $79.27 -4.70%
TRX $0.3130 -1.26%
DOGE $0.0643 -4.41%
ADA $0.1693 -2.22%
BCH $219.05 -4.51%
LINK $9.81 -3.12%
HYPE $71.64 -0.68%
AAVE $112.04 -6.06%
SUI $0.7811 -4.40%
XLM $0.1436 -1.97%
ZEC $935.80 -4.94%
AAPL $356.99 +0.25%
AMZN $268.55 +0.82%
GOOGL $301.08 +2.00%
MSFT $522.54 +0.17%
META $625.66 -0.78%
NVDA $164.07 +1.76%
TSLA $398.77 +3.03%
SNDK $928.72 -3.21%
INTC $61.03 +0.18%
SPCX $140.84 +0.67%
MU $796.27 +0.62%
AMD $576.82 +1.88%
BTC $69,330.00 -5.98%
ETH $1,960.89 -4.42%
BNB $638.27 -5.85%
XRP $1.01 -3.33%
SOL $79.27 -4.70%
TRX $0.3130 -1.26%
DOGE $0.0643 -4.41%
ADA $0.1693 -2.22%
BCH $219.05 -4.51%
LINK $9.81 -3.12%
HYPE $71.64 -0.68%
AAVE $112.04 -6.06%
SUI $0.7811 -4.40%
XLM $0.1436 -1.97%
ZEC $935.80 -4.94%
AAPL $356.99 +0.25%
AMZN $268.55 +0.82%
GOOGL $301.08 +2.00%
MSFT $522.54 +0.17%
META $625.66 -0.78%
NVDA $164.07 +1.76%
TSLA $398.77 +3.03%
SNDK $928.72 -3.21%
INTC $61.03 +0.18%
SPCX $140.84 +0.67%
MU $796.27 +0.62%
AMD $576.82 +1.88%

aip

All
Article
Flash

first_img CoinEx founder Yang Haipo: The theft at Binance exposed three issues that could have been avoided, including the incomplete isolation of its development and operation environment

ViaBTC mining pool and CoinEx trading platform founder and CEO Yang Haipo posted on X, commenting on the Binance security incident. He stated that the incident exposed at least three avoidable mistakes, which do not require complex technology; what is lacking is discipline.Yang Haipo pointed out that first, the development and operation environments were not completely isolated. Personnel with production environment permissions should use dedicated devices and not install third-party software; coding, chatting, and web browsing should be done on another device. Second, the operation and maintenance system lacked effective dual verification. A single key could operate production services, and once the key was leaked, attackers could gain full production access. He believes that production operations could be conducted in a manner similar to AWS browser-based Session Manager, using hardware security keys as a second factor to prevent a single credential leak from constituting a breach. Third, MPC multi-signature is merely nominal; the signers did not perform substantial independent verification of the transactions. Compromising one node could render the entire mechanism ineffective, resulting in the same effect as a single signature. Multi-signature is only effective when the signers do not trust each other, independently verify the transaction itself, rather than trusting upstream requests.On November 3, Binance released preliminary investigation results regarding the security incident on October 29. Binance stated that approximately $6.34 billion in digital assets were affected, and as of the update, about $2.85 billion had been frozen or intercepted, with 98% of the affected tokens having been replenished. The report indicated that attackers gained unauthorized access to the internal wallet signature service and exploited Ethereum EIP-7702 to authorize the hot wallet; due to the hot wallet using multi-party computation, it could not immediately revoke the relevant authorization with a single private key. Binance cited information from the FBI stating that North Korea is responsible for this incident.

CoinEx founder Yang Haipo: Once considered selling, ultimately decided to shut down

Yang Haipo, the founder of CoinEx, stated that CoinEx officially launched on December 22, 2017, and will officially close on December 22, 2026, nine years later. He mentioned that nine years is a long time in the cryptocurrency industry, and CoinEx has gone through multiple bull and bear cycles with its users, witnessing the rise and fall of numerous projects, as well as seeing many peers leave the market in different ways.Yang Haipo expressed that after reflection, he accepted the fact that CoinEx has not become a leading exchange in the industry, and the security and compliance risks of operating a cryptocurrency exchange have become increasingly difficult to control; revenue may decline, but responsibility does not lessen, and bearing unlimited risks with limited revenue is no longer a rational choice. He stated that CoinEx has survived for nine years in a highly volatile and harsh industry, and after experiencing various storms, it can still leave completely and with dignity.Regarding CET, CoinEx will repurchase it at its initial listing price of 0.005 USDT per coin, with no quantity limit set. Yang Haipo mentioned that he seriously considered selling CoinEx but ultimately decided against it because users entrusted their assets to CoinEx based on their trust in the platform and him personally. He believes that handing over the platform and this trust to a new owner is not the right way to end this journey, stating, "A clean end is the right end." CoinEx will ensure that users can fully withdraw their assets, provide employees with a dignified farewell, and offer a clear and responsible handling plan for CET holders.
app_icon
ChainCatcher Building the Web3 world with innovations.