SEAL Estimates Eight Weeks of Access Before Binance’s $6.34B Theft

SEAL’s roughly eight-week estimate uses an unspecified September start; Binance dates access to wallet-signing operations to Oct. 29.

SEAL’s estimate does not specify a day in September. Binance’s timeline says a computer compromised in September was used with an internal AI tool on Oct. 20 to gain access to two other engineers’ devices. Binance dates access to wallet-signing operations to Oct. 29.

Binance later put the impact at about $6.34 billion in token assets. The incident began around 4:05 p.m. ET (20:05 UTC) Oct. 29. Binance said attackers abused its internal wallet transaction-signing service and Ethereum’s EIP-7702 authorization mechanism to move assets outside the usual withdrawal process.

The FBI attributed the theft of more than $6 billion to North Korea and calls the activity TraderTraitor. Binance said it found no evidence that wallet private keys were leaked.