The key to this 6.3-billion incident wasn’t a traditional “private key leak,” but the exploitation of a new mechanism called EIP-7702.
Simply put, the hackers didn’t steal the key. Instead, they manipulated the signing system and used a technique called “authorization spraying” to get the system to issue them a pass.
It’s like this: your front door lock isn’t broken, and you’re the only one with a key, but someone tricks the security guard into opening the entry gate.
Simply put, the hackers didn’t steal the key. Instead, they manipulated the signing system and used a technique called “authorization spraying” to get the system to issue them a pass.
It’s like this: your front door lock isn’t broken, and you’re the only one with a key, but someone tricks the security guard into opening the entry gate.