TREE NEWS update: Binance hot wallets across six blockchains were drained of at least $5.5 billion starting October 29, 2026, in the largest publicly recorded crypto theft. Attackers used an EIP-7702 authorization signed with a Binance 14 private key to delegate the wallet to a sweeper contract, then emptied 11 Binance wallets across Ethereum, Arbitrum, Optimism and Avalanche within 12 minutes. Tether and Circle froze about $1.8 billion on the main receiving address; Binance said it is investigating.
Binance Hot Wallets Drained of $5.5B via EIP-7702 Exploit
The use of EIP-7702 delegation turns a single key compromise into a sweeping mechanism across multiple chains at once, which reframes wallet security as a smart-account authorization problem rather than a key-storage one. The scale and speed put exchange hot-wallet architecture, and the concentration risk it implies for on-chain liquidity, squarely in focus. The partial stablecoin freezes show issuer-level intervention still has reach, though most of the funds moved beyond it. How Binance attributes the key exposure, and whether delegation-based attack patterns spread to other custodians, is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.