23pds: We recommend focusing on investigating the private key leakage chain and abnormal withdrawal tools involved in the Binance asset theft incident.

SlowMist CISO 23pds stated that in the Binance asset theft incident, the attackers bypassed the risk control system. It is crucial to confirm whether the intrusion path was due to a private key leak or a compromised signature machine. They tend to favor the assumption of a private key leak and pointed out that the attackers used customized withdrawal tools. They recommend that the security department focus on investigating the private key leak chain and the characteristics of abnormal withdrawal tools.