Binance Co-CEO Richard Teng said multiple attackers used self-destruct mechanisms to erase their tools and traces during the $6.3 billion hack, while President Donald Trump said the US is investigating whether North Korea was behind the record crypto theft. Addressing reporters in the Oval Office, Trump said “we don’t know” yet if Pyongyang was responsible, noted Binance’s claim that the situation is under control with a “we’ll see,” and called digital money “a little bit dangerous” compared with paper checks because users cannot physically see their funds.
Teng said investigators uncovered multiple entry points beyond the initially suspected DevOps engineer’s laptop, which gave the attackers access to a production signing container without leaking wallet private keys. On Ethereum, the hackers submitted 50 pre-signed EIP-7702 authorizations to seize execution control of Binance Hot Wallet 14, bypassing standard approval checks to sweep $2.5 billion in a single transaction and pull another $780 million in USDC from a second Binance wallet. Binance is rebuilding and testing its withdrawal service to resume payouts within 34 to 40 hours and plans to publish an updated Proof of Reserves report on Monday.
