The attackers never stole a wallet key. They used access that Binance's own systems already trusted.
Least Privilege
+8