Not your wallet, not your coin, this is a srs currency stop laughing at me

you are viewing a single comment's thread
view the rest of the comments
[–] 19 points 1 week ago (5 children)

The world’s largest crypto exchange said an initial investigation suggests “the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions.”

A single engineer for the largest crypto exchange in the world can move $6b in funds? Really?

  • source
  • hideshow 5 child comments
  • [–] 2 points 1 week ago (1 child)

    It could be the case that there is some "mega engineer" that is important enough to have access to enough credentials to be able to put this together. Probably you could build around any one person having access like that, but some combination of people need to have keys somewhere.

    But "DevOps Engineer" doesn't sound like the person who should have access to the root pursestrings...

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 1 week ago

    Nah. You build systems like this in a way you need multiple signers to move this level of funds. It's absolute negligence that one operator could do this. Giving that level of control to a single person is asking for an attack like this.

    I say this as someone that's worked on systems like these at a smaller scale.

  • source
  • parent