ATTACKERS REPORTEDLY EXPLOITED ETHEREUM’S EIP-7702 TO DRAIN BINANCE WALLETS On-chain analysis suggests attackers obtained signed authorizations allowing them to install malicious code on Binance-linked wallets without directly accessing their private keys. The attackers then used a function called “sweep” to transfer ETH and dozens of tokens into an attacker-controlled wallet. The same delegated permissions were reportedly used to move another $780 million in USDC from a separate Binance hot wallet. The attacker’s transaction relayer was funded through Tornado Cash, while nearly 195,460 ETH was subsequently transferred to a newly created wallet. How the attackers obtained the authorizations remains unknown. Binance says user funds are safe and is investigating.

X (formerly Twitter)

Bitcoin News (@BitcoinNewsCom) on X

ATTACKERS REPORTEDLY EXPLOITED ETHEREUM’S EIP-7702 TO DRAIN BINANCE WALLETS On-chain analysis suggests attackers obtained signed authorizations ...

Sad! Just sad! 😣

As a shareholder now. He was the first person to confirm that on X.