Episode summary
Why One Infected Laptop Led to the Largest Hack in History
Summary
Binance was reportedly drained of $6.3 billion by North Korea in what the guests describe as the largest hack in history, and about half of the stolen value was frozen afterward. The discussion centers on how a compromised developer laptop appears to have been the entry point, letting attackers reach a service container and sign malicious transactions without necessarily stealing Binance’s private keys.
Pablo Sabbatella says the attackers likely pre-signed 50 transactions with different nonces, then used one to convert a hot wallet into a smart account controlled by an external contract. That let them sweep assets as soon as funds arrived, including new deposits that were still flowing into the wallet during the theft.
Both guests argue EIP-7702 was not the cause of the breach, but it may have made the drain faster and more efficient. Pablo says the upgrade expands the attack surface and can help drainer operations steal more assets in one transaction, while the other guest frames the incident as fundamentally an operational security failure involving malware and possibly social engineering.
Key takeaways
- The guests say the core failure was operational security: a developer laptop was compromised, not an EIP-7702 bug.
- Pablo Sabbatella says the attackers pre-signed 50 transactions and used nonce selection to land the malicious one.
- The attackers allegedly converted a hot wallet into a smart account, letting an external contract sweep assets.
- The guests agree EIP-7702 made the theft faster, but did not cause the Binance hack.
- About half of the reported $6.3 billion was frozen, but the scale was still unprecedented.
Notable quotes
“Binance was hacked for $6.3 billion by North Korea in what is the largest hack in history, not just crypto history”
“a developer's laptop was compromised, right? If we If we see what has been happening in the last 3 years, nine out of 10 attacks”
“they pre-signed 50 different transactions, each one of them with a different nonce, because when you do transactions in a wallet, every transaction has a nonce”
“it was a transaction that converted, like let's say, upgraded this hot wallet to some kind of smart wallet or smart account”
“the hack was not due to this, right? So, they were able to sign these malicious transactions”
Topics
- binance hack
- north korea cyberattack
- operational security
- compromised developer laptop
- eip-7702
Companies and tickers mentioned
- Binance
- Pangolin Intelligence
- Opsek
Watch the episode
Watch “Why One Infected Laptop Led to the Largest Hack in History” on YouTube
Summary, takeaways and quote selection by Octagon. Quotes are short excerpts; the full conversation is in the episode.
More from Unchained
-
Should Ethereum Tax Its Apps to Prove Its Security Is Worth It? -
Ledger and the Metadata Your Hardware Wallet Sends After You Sign - Uneasy Money -
How Institutions Are Thinking About Crypto in an Era of Record Hacks -
Is Ethereum's $240 Billion Market Cap Justified With Only $6 Million in Monthly Fees? -
Jeff Dorman: Why ETH as a Store of Value Doesn't Add Up -
Should Vitalik Leave the Ethereum Pitch to Others? - Uneasy Money
Unchained, this episode and its artwork belong to Laura Shin. Octagon is not affiliated with the show; this page is an independent summary.