Ethereum EIP-7702 linked to Binance breach investigation
BROBROK News · Based on reporting by Portal do Bitcoin ·
A feature added to Ethereum to improve wallet usability was cited as one of the tools used in the Binance attack. According to the report, EIP-7702 allowed a malicious contract to operate a Binance wallet using valid authorizations.
Key points
- The attack reportedly used EIP-7702, introduced in Ethereum's Pectra upgrade.
- About $2.5 billion was said to be drained from one wallet in under four minutes.
- The incident spanned several blockchains, including Bitcoin, Ethereum, Solana and Tron.
- Investigators say valid digital authorizations were used to run attacker-controlled smart contracts.
- Binance has not fully explained how the signatures were obtained.
Why it matters
The case highlights how features designed to make wallets more flexible can also increase security risk if authorization is compromised. It raises broader questions about signing infrastructure and operational security at large exchanges.
Original headline: “Como uma atualização do Ethereum ajudou hacker no roubo de US$ 6 bilhões da Binance”
Read the original on Portal do Bitcoin
Summary and analysis written by BROBROK News from the original report. Read the full story on the source website. Not investment advice.