Odaily Planet Daily News Binance Co-founder CZ posted on the X platform that he usually does not criticize other industry players, but the incident report released by Safe uses vague language to cover up the problem. After reading it, there are more questions than answers, including:
1. What does "hacking Safe {Wallet} developer machine" mean? How did they hack this particular machine? Is it social engineering, virus, etc.?
2. How does the developer machine access the "account operated by Bybit"? Some code is deployed directly from this developer machine to the production environment?
3. How did they deceive the Ledger verification step among multiple signers? Is it a blind signature? Or did the signer not verify correctly?
4. Is $1.4 billion the largest address managed with Safe? Why don't they target others?
5. What can other "self-custodial, multi-signature" wallet providers and users learn from this?