If I'm not mistaken, I saw a tweet that marked CZ from the victim's statement who actually lost his funds in his Binance account when making a deposit with an address that automatically changed to the thief's address. Unfortunately I can no longer find the tweet.
The conclusion is that every time we make a deposit or withdrawal, we need to pay attention to the address many times and as much as possible ensure the appropriate initial, middle and end digits. Usually I paste it first to compare whether it's the same or not at least 2 to 3 checks.