An attacker used Ethereum’s EIP-7702 feature, which lets ordinary wallets run smart-contract code, to drain about $2.5 billion from a Binance wallet in less than four minutes on Thursday.
The attacker obtained valid signatures authorizing malicious code that remained active for nearly four hours, allowing further thefts as customer deposits continued arriving.
Binance put losses across several blockchains at $6.3 billion and pledged to cover them, while investigators continue examining how the attacker obtained authorization to move the funds.
#HackingIncidents
The attacker obtained valid signatures authorizing malicious code that remained active for nearly four hours, allowing further thefts as customer deposits continued arriving.
Binance put losses across several blockchains at $6.3 billion and pledged to cover them, while investigators continue examining how the attacker obtained authorization to move the funds.
#HackingIncidents