LATCH, the official black-and-tan guardian dog with a turquoise clasp, standing before a glowing circular gate

$LATCH  /  SOLANA  /  COMMUNITY MEMECOIN

The key didn't have to leak.

The signature still mattered.

Born from a $6.3B crypto security wake-up call. Meet the guardian asking the question everyone should ask before signing.

WHAT ARE WE ACTUALLY SIGNING?

MEET LATCH →THE STORY

A community memecoin. Not a security service.

OCTOBER 29–30, 2026

Billions moved. Trust was tested.

Binance's Nov 3 preliminary findings describe a multi-stage campaign spanning malicious software, fake interviews, and compromised internal signing infrastructure; Binance reports no evidence of wallet-private-key leakage. Independent review remains ongoing.

01

~$6.34B

Assets affected, per Binance's preliminary report (Nov 3)

02

~$2.85B

Frozen or intercepted — not returned (Binance, Nov 3)

03

NO EVIDENCE OF KEY LEAK

Binance's preliminary finding (Nov 3); independent review ongoing

04

~98% REPLENISHED

Affected assets replaced from Binance's own resources — not recovered from attackers (Binance, Nov 4)

As of November 4, 2026. Preliminary figures, subject to updates.

OFFICIAL Binance preliminary incident report (Nov 3, 2026) ↗OFFICIAL Binance Recovery Update #7 (Nov 4, 2026) ↗

THE HUMAN FACTOR

It wasn't just about the keys.

Security doesn't end at key storage. It depends on devices, services, permissions and the systems deciding what gets signed.

  1. 01

    ENTRY

    A compromised engineering device was identified as a possible entry point.

  2. 02

    PIPELINE

    Unauthorized withdrawal requests passed through trusted infrastructure.

  3. 03

    DECISION

    A cryptographically valid signature does not always reflect legitimate intent.

Illustration: LATCH beside a laptop with abstract light streams flowing into a pipeline (conceptual, not a recreation)
Conceptual illustration — not a forensic recreation.

THE SIGNATURE · EIP-7702

50 authorizations. One valid match.

EIP-7702 allows an Ethereum account to delegate execution to smart-contract code. Independent analysts identified 50 pre-signed authorizations; one matched the wallet's current nonce, allowing delegation to attacker-controlled sweeper logic. EIP-7702 itself is a legitimate feature, not a security flaw.

  1. 01×50

    PREPARE

    Signed authorizations prepared

  2. 021/50 ✓

    MATCH

    One valid nonce match

  3. 03

    DELEGATE

    Execution delegated to attacker-controlled code

  4. 04

    SWEEP

    Unauthorized asset transfers

BINANCE (OFFICIAL, PRELIMINARY)

Compromised engineer devices led to unauthorized use of an internal wallet signing service. No evidence of private-key exposure; independent review ongoing.

SOURCE Binance preliminary incident report (Nov 3, 2026) ↗

INDEPENDENT RESEARCHERS (ON-CHAIN ANALYSIS)

The 50-authorization / nonce-match / delegation flow above is drawn from third-party analysis, not Binance's statement.

SOURCE Blockaid analysis ↗SOURCE TRM Labs analysis ↗SPEC EIP-7702 specification ↗

Full Binance hack 2026 explainer →

Valid signature. Wrong intent.

THE NEXT LAYER

Don't just protect the key. Protect the decision.

What better signing infrastructure could look like:

Illustration: LATCH standing before four transparent verification layers
LAYER 01

POLICY FIRST

Define limits before authorization.

LAYER 02

VERIFY INTENT

Check the real purpose of a request.

LAYER 03

MONITOR AUTHORITY

Watch permissions, delegations and unusual behavior.

LAYER 04

LIMIT THE BLAST RADIUS

Separate privileges and prepare containment.

Educational principles. LATCH does not provide these services.

HISTORY RHYMES

Different attacks. Familiar trust boundaries.

2025

BYBIT

Roughly $1.5B stolen after compromise involving wallet interface and transaction approval. The FBI attributed it to North Korea's TraderTraitor.

OFFICIAL FBI — Bybit attribution ↗

Attackers don't always need to break cryptography. Sometimes they target the infrastructure trusted to use it.

THE RESPONSE NETWORK — Investigators, issuers and protocol teams reacted in real time. Explore the documented response →

THE PACK

Small dog.
Big questions.

Guard what gets signed.

Latch is a memecoin mascot born from a crypto security wake-up call. He doesn't secure wallets. He keeps the right question alive.

THE LATCH CHECK

  • WHO SIGNED?
  • WHAT WAS AUTHORIZED?
  • WHO BENEFITED?
JOIN THE PACK 🐾OFFICIAL ANNOUNCEMENTS ↗FOLLOW ON X ↗
LATCH, the official mascot: black-and-tan guardian dog in a charcoal harness with a turquoise open-loop clasp