Unattributed: Security incident

TL;DR Binance 14 was delegated to attacker-controlled code through EIP-7702, enabling one transaction to sweep about $2.5 billion in ETH and tokens. The attacker used 50 valid authorizations covering consecutive nonces. EIP-7702 required Binance 14 signatures, leaving the source of those signatures central to the investigation. Researchers say EIP-7702 may have amplified the drain but ... Read more

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://crypto-economy.com/ethereums-eip-7702-used-to-sweep-2-5b/

Record history

First seen: 2026-10-30T13:01:00.000Z. Last updated: 2026-10-30T13:28:48.570Z. Revision: 1.