Here’s how an Ethereum upgrade helped drain part of Binance’s $6 billion loss
An attacker exploited an Ethereum upgrade feature called EIP-7702 to drain approximately $2.5 billion from a Binance wallet in less than four minutes. The malicious transaction used 50 valid signatures from a Binance-controlled wallet to grant an attacker-controlled contract operating control. Binance reported total losses of $6.3 billion across multiple blockchains and stated that investigations are examining how the authorization signatures were obtained. Open article →
- Binance hot wallet signed 50 EIP-7702 delegations 3 minutes before the drain
- Binance hot wallets lost ~$6.28B across 8 chains today. $6.07B went in the first 55 minutes, and the attacker kept re-sweeping one Ethereum wallet for two more hours.<br /> <br /> Since then Tether, Circle, Ripple, Paxos, World Liberty and Binance have frozen ~$2.80B. About $3.27B can still move, mostly BTC and ETH.<br /> <br /> I traced it all on-chain, including how the attacker raced the freezes 🧵<span class="entity-image"><a href="https://pbs.twimg.com/media/HV1k6fNWEAAZuzm.jpg" target="_bla
- North Korean hackers blamed for stealing record $6.3B in Binance breach
- Binance pauses withdrawals as hackers suspected of stealing billions in crypto
- Binance Exploit: Latest Findings and Response
- Attacker gets away with up to $3 billion from Binance
- Inside the largest crypto hack on record: How attackers breached Binance for $6.3 billion
- Binance arranges $6.34 billion to cover losses from record crypto hack
- North Korea Steals USD 6.36 Billion From Binance in the Largest Hack in History | TRM Labs
- Binance uncovers wider breach in $6.3 billion exploit, targets Sunday withdrawal restart
- Binance hacker splits $1.4 billion of bitcoin into 19 wallets that no one can freeze
- Institutional crypto investors rush to pull funds from exchanges after Binance hack
- Binance hack drained wallets backing customer assets, reserve data shows
- Experts divided over Binance hack asset freezes, warn recovery is another matter
- Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds
- $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
- Binance hack: Investigators in a 'cat and mouse game' to recover $6.3 billion in stolen funds
- This looks like a compromise of Binance's internal wallet control systems, rather than direct access to signing keys.<br /> <br /> The 11 theft txs match the wallet fingerprint of legitimate Binance activity.<br /> <br /> Let's compare a routine sweep from earlier this year to one of the theft txs 🧵 <span class="entity-embed"><span class="twitter-player"><blockquote class="twitter-tweet"><a href="https://twitter.com/mononautical/status/2115965643577319586">https://twitter.com/mononautical/status
- Deconstructing the Binance Exploit
- Binance $6.3B hack analysis: stolen key, hijacked signer or EIP-7702 delegation? - Hacken
- Hackers steal $6.3 billion from Binance in record crypto heist
- President Trump says they’re looking into Binance hack as calls grow for crypto rules
- Binance says it has $6.34 billion ready to cover hack losses
- Binance investigating hack as suspicious outflows reach up to $5.8 billion
- Crypto's longtime foe, North Korea's Lazarus Group, likely behind Binance hack: blockchain sleuths