0xDEADBEEF said:
Some updates over the weekend:
https://blog.trailofbits.com/2025/0...of-operational-security-failures-has-arrived/
https://twitter.com/x/status/1893211577836302365
Compromising the signing infrastructure is one of the worst things that can happen to a company. The fact that all signs point to basic security failures says a lot about the management. If they can't get the fundamentals right, they're a risk to the organization. I've flagged this kind of thing to risk committees before as a classic insider threat. Fraud like this usually comes down to a mix of opportunity and the belief that they can actually pull it off.
Saying the funds can't be laundered is wishful thinking. Sure, AI-powered tracking makes it harder, but there are still plenty of ways to cash out. Slow, structured withdrawals, OTC deals, or working with state-sponsored actors (hint, hint) and darknet liquidity pools. A well-connected person can move large amounts over time, even if they take a haircut on the value.
And if management ignored basic security controls, it's not a stretch to think they also lacked internal oversight. That kind of setup is exactly how insider fraud happens, making an inside job more than just possible, it's actually pretty likely.
Click to expand...