Binance Faces Largest Suspected Hack in Crypto History
In the early hours of today, Binance experienced an abnormal outflow of nearly $5.8 billion, marking what could be the largest hack in cryptocurrency history. Approximately $3 billion has already been frozen, and the exchange has pledged to cover all losses. The attack, which exploited an EIP-7702 authorization vulnerability after apparent prior rehearsal, triggered panic selling across crypto markets, leading to over $1.55 billion in liquidations.
How the Attack Unfolded
The attacker leveraged EIP-7702, a recently activated Ethereum upgrade that allows externally owned accounts (EOAs) to delegate execution to smart contracts. By tricking users into signing malicious authorizations, the hacker gained control over a large number of wallets and accelerated fund extraction. The scale and speed of the operation suggest sophisticated planning, with evidence of test runs on smaller amounts before the main strike.
Binance’s security team detected the anomaly within minutes and initiated emergency protocols, freezing about $3 billion across multiple chains. The exchange’s CEO assured users that all losses would be covered by the company’s SAFU insurance fund and reserves, and that withdrawals would resume once the investigation concludes.
Market Impact and Liquidation Cascade
The news sent shockwaves through the crypto market. Bitcoin briefly dipped below $60,000, while altcoins suffered double-digit percentage losses. Over $1.55 billion in leveraged positions were liquidated in the past 24 hours, with longs accounting for the majority. The fear and greed index plunged into “extreme fear” territory.
Investor confidence in centralized exchanges (CEXs) has been shaken. On-chain data shows a spike in withdrawals from Binance to self-custody wallets, although the exchange has enough reserves to process them. Competing exchanges like OKX and Bybit reported no abnormal outflows but are monitoring the situation closely.
Industry Implications: A Wake-Up Call for Security
This incident highlights the evolving attack vectors in DeFi and CEX security. EIP-7702, while designed to improve user experience, introduces new risks if not implemented carefully. Security experts urge wallet providers and exchanges to educate users about authorization risks and to implement additional safeguards such as transaction simulation and spending limits.
For Binance, the hack tests its crisis management and could impact its regulatory standing. The exchange has faced increased scrutiny from regulators worldwide, and a major security breach might accelerate calls for stricter oversight. However, the swift freeze of a significant portion of funds demonstrates improved collaboration between exchanges and blockchain analytics firms.
Looking Ahead
As the investigation continues, the crypto community watches closely. The outcome will likely influence how exchanges handle security upgrades and user education. While the immediate panic may subside, the long-term effects on trust and regulation could be profound. Investors are advised to remain cautious, diversify custody solutions, and stay informed about protocol upgrades that may affect their holdings.
