According to CoinMeta, the incident involving Blockaid CEO Ido Ben - Natan appears to be a case of private key misuse rather than a leak. The attackers breached the signature system to authorize malicious transactions. He believes this incident is very similar to the theft of Bybit in February 2025, as the tactics used on the chain are consistent with the characteristics of actions by North Korean hackers. The specific attack methods involved in Binance have not yet been confirmed.