Ethereum’s EIP-7702 Used to Sweep $2.5B From Binance Hot Wallet

TL;DR Binance 14 was delegated to attacker-controlled code through EIP-7702, enabling one transaction to sweep about $2.5 billion in ETH and tokens. The attacker used 50 valid authorizations covering consecutive nonces. EIP-7702 required Binance 14 signatures, leaving the source of those signatures central to the investigation. Researchers say EIP-7702 may have amplified the drain but did not cause the broader breach, which affected multiple chains and used ordinary signed transfers elsewhere. A 2025 Ethereum feature was used to turn a Binance hot wallet into an attacker-controlled smart-account sweeper , enabling a single transaction to move about $2.5 billion in ETH and tokens. An onchain reconstruction shows the attacker installed an EIP-7702 delegation on Binance 14 using valid signed authorizations.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Economy.