Absolutely stunning that a private company has the free cash to repay and absorb a loss of $6.3 billion. I'm clearly in the wrong business.
dalant979 1 days ago [-]
They don't have to cover $6.3 billion. Most of the stable coins were caught and frozen. Also part will be covered by insurance, so they just need to cover the gap.
gizajob 1 days ago [-]
*had
elffjs 1 days ago [-]
Interview malware, again.
dboreham 1 days ago [-]
They still don't say how the ability to subvert a production container allowed the attacker to then subvert a fancy EIP-7702 MPC signature scheme that is supposed to depend on multiple parties (the whole idea being that if one party is breached the scheme remains trusted).
"the attacker logged onto Software Engineer C’s computer, used the credentials stolen from Wallet DevOps Engineer A, deployed a container, and triggered a malicious script to launch the attack."
"the attacker logged onto Software Engineer C’s computer, used the credentials stolen from Wallet DevOps Engineer A, deployed a container, and triggered a malicious script to launch the attack."