This is the first time I heard of the 3FA authentication, well it's just an additional step towards authenticating who you are. I think there's no problem with having 2FA or 3FA, and it's going to be extra work for the hackers that they can bypass again. We all know that 2FA has incredibly increased the protection of accounts, but in general, as long as something is working, someone is working on getting through it.
I only heard it after the Binance hack, and others have been speculating as to what 3FA is all about, there have been reports that DNA profile is a good step, but I'm not agreeing with that.
I wonder though this comment on the article:
“To access the network, exchange employees should be required to use an authentication app on their phone, a certificate on their computer to access the corporate VPN, and a password. That way, if criminals phish an exchange worker’s password or break it with brute force they’re still not getting in.”
I don't understand why it is referred to as exchange employees/exchange worker, does it mean that that hackers was able to access Binance employer's account, that why initially it was reported as an inside job?