Wu Blockchain has reconstructed the hacker attack timeline based on Binance's preliminary investigation: Attackers gradually infiltrated the wallet signing service through three engineers, ultimately initiating unauthorized asset transfers on October 29. The timeline shows that in June, Wallet DevOps Engineer A downloaded a tampered Homebrew installer, leading to the exposure of information about the engineer and colleagues. In September, Engineer B downloaded a malicious code library during a fake interview, resulting in their work computer being compromised. On October 20, attackers used compromised devices and internal AI tools to gain control of Engineers A and C, and discovered container deployment permission tokens on A's computer. On October 29, attackers accessed C's computer, used credentials stolen from A to deploy a container and execute malicious scripts, and ultimately initiated unauthorized asset transfers through Binance's internal wallet signing service.