ReportedrecoveryStatement 763
The delegation was cleared at 00:10:35 on October 30, three hours and fifty minutes after it was installed.
Halborn said the delegation was cleared at 00:10:35 on 30 October, three hours and fifty minutes after it was installed.
This line is our short summary of the quote below. The quote is the evidence.
Other statements from the same source
ReportedattributionStatement 779
Halborn said Sygnia traced the Bybit loss to a compromised developer workstation, stolen cloud session tokens and a tampered signing interface, called it the same playbook with a different entry, and added that precedent is not evidence.
In Bybit, Sygnia traced the loss to a compromised developer workstation at the wallet provider, stolen cloud session tokens and a tampered signing interface. Same playbook, different entry. Precedent is not evidence, but it is a very good search warrant.
ReportedattributionStatement 778
Halborn gave its own view, before any government attribution, that the pattern fits TraderTraitor and that compliance teams should act on it rather than wait for a press release.
My view is that the pattern fits and that a compliance team should act on it today rather than wait for a press release.
ReportedattributionStatement 777
Halborn said Elliptic also lists caveats: the shared address could be a launderer serving several clients, the stablecoins were held longer than North Korea usually holds them, the cash-out used market makers and lending rather than bridges, and no government had spoken whereas the FBI attributed Bybit within five days.
Elliptic also lists the caveats: the shared address could be a launderer serving several clients, the stablecoins were held longer than North Korea usually holds them, the cash-out went through market makers and lending rather than bridges, and no government has said a word, whereas the FBI attributed Bybit within five days. Binance has named nobody.
ReportedattributionStatement 776
Halborn said Elliptic's further reasons were the preparation pattern seen in Bybit and KelpDAO, the targeting of staff matching the DMM Bitcoin case, and the capability to drain eleven chains in three hours.
the preparation pattern of Tornado Cash funding, rehearsal and pre-signed bursts seen in Bybit and in KelpDAO in April; the targeting of staff, which matches the DMM Bitcoin case; and the capability to drain eleven chains in three hours.
ReportedattributionStatement 775
Halborn said Elliptic rates the attribution as likely and lists a laundering address shared with the September Bitget theft, with only about 39,000 dollars of Binance funds against 510,000 linked to Bitget.
Elliptic says likely, and lists its reasons: a laundering address shared with the September Bitget theft, 0x1510…feb7, although only about 39,000 dollars of Binance funds reached it against 510,000 linked to Bitget;