Bloomberg reports that Binance hackers moved $2.5 billion in a single transaction while paying approximately $15 in network fees.
The transaction reportedly used a feature introduced through Ethereum’s EIP-7702 upgrade.
The incident raises questions about wallet security and the risks associated with advanced transaction capabilities.
Hackers linked to the reported Binance security breach allegedly transferred $2.5 billion in cryptocurrency through a single transaction costing just $15 in network fees.
According to Bloomberg, the attackers used functionality associated with Ethereum’s EIP-7702 upgrade to execute the transfer.
The reported Binance hack EIP-7702 transaction highlights how large amounts of digital assets can move across blockchain networks at relatively low costs.
The difference between the reported transfer value and the transaction fee is particularly striking.
However, blockchain transaction fees are generally determined by network resource usage rather than the dollar value of the assets being transferred.
As a result, a multibillion-dollar transfer does not necessarily require a proportionally large fee.
The report does not establish that the EIP-7702 upgrade itself contained a security vulnerability.
It also does not explain whether the attackers exploited compromised wallet permissions, stolen credentials or another weakness.
How Ethereum’s EIP-7702 Upgrade Works
The Binance hack EIP-7702 report has drawn attention to a relatively new Ethereum feature.
EIP-7702 was introduced as part of Ethereum’s Pectra upgrade to expand the capabilities of externally owned accounts.
Traditionally, these accounts are controlled through private keys and have more limited functionality than smart contract wallets.
EIP-7702 allows eligible accounts to delegate certain functionality to smart contract code.
This can support features such as transaction batching, sponsored fees and more flexible wallet operations.
These capabilities are designed to improve how users interact with Ethereum applications.
However, advanced wallet permissions must be managed carefully.
If an attacker gains control of an account or persuades a user to authorize malicious functionality, the consequences can be serious.
The presence of EIP-7702 in a transaction does not, by itself, demonstrate that the Ethereum protocol was compromised.
Determining the exact cause would require a detailed technical investigation.
NEW: Binance hackers paid just $15 in network fees to drain $2.5 billion in a single transaction via a feature from Ethereum’s EIP-7702 upgrade, per Bloomberg. pic.twitter.com/RrqgoFKLp7
— Cointelegraph (@Cointelegraph) November 6, 2026
What the Binance Hack Means for Crypto Security
The reported Binance hack EIP-7702 transaction highlights the importance of protecting wallet authorization mechanisms.
A blockchain can process a technically valid transaction even when the person initiating it has obtained access through unauthorized means.
This makes private key protection, transaction approval controls and monitoring systems essential for cryptocurrency custodians.
The incident also illustrates how quickly large amounts of digital assets can be transferred once an attacker gains sufficient control.
For exchanges, strong internal safeguards can be just as important as the security of the underlying blockchain.
These may include distributed authorization, withdrawal restrictions and systems designed to detect unusual activity.
Further technical disclosures would be needed to determine exactly how the reported transfer occurred.
For now, Bloomberg’s account highlights the scale and low transaction cost of the alleged movement of funds, while leaving important questions about the attack mechanism unanswered.