Obligatory and should be obvious: a threat model that allows a single compromised laptop to result in a $6.3B loss is fundamentally flawed. Analyze the specific way that the laptop was compromised all you want, the fault here is entirely with the Binance security culture that allows such a gaping hole to exist in the first place.
I hope that Binance understands this and spends less time worrying about how the laptop was compromised and more time securing their systems under the very basic assumption that laptops will be compromised.