arXiv:2611.00839v1 Announce Type: new Abstract: Binance's preliminary account of its October 2026 attack raises a custody question that key protection alone cannot answer: how can a provider prevent unauthorized withdrawals when an attacker controls a service permitted to request signatures? We propose the Intent-Bound Withdrawal Authorization Protocol (IWAP).

Read the full article at arXiv cs.CR →