EIP-7702 Likely Amplified Binance Hack Losses, Experts Say
Security researchers conclude EIP-7702 wasn't the root cause of the Binance breach but may have helped attackers circumvent withdrawal protections.
Security experts examining a hack targeting Binance wallets have determined that Ethereum's EIP-7702 upgrade did not directly cause the breach, but evidence suggests the protocol change may have allowed attackers to bypass withdrawal safeguards and magnify the overall damage inflicted.
Analysts note that the threat actors behind the attack possessed the capability to drain the targeted wallets independent of EIP-7702, meaning the vulnerability they exploited existed prior to the Ethereum upgrade taking effect. The upgrade, however, appears to have handed those attackers an additional lever — one that potentially stripped away certain protective controls that would otherwise have capped the scale of the theft.
Read more Global Payments Shares Surge on CD&R Takeover Report →
EIP-7702 is a significant Ethereum Improvement Proposal that alters how externally owned accounts can delegate code execution, expanding wallet functionality in ways that proponents argue enhance user experience. Critics and security researchers have warned since its introduction that such expanded capabilities could create unforeseen attack surfaces if not carefully managed by wallet providers and users alike.
The distinction between cause and amplifier carries real weight for the broader crypto security community. If EIP-7702 did not introduce the original vulnerability but did worsen outcomes, that places responsibility on both protocol designers to anticipate edge cases and on exchanges like Binance to audit how new Ethereum features interact with their existing security architecture before they go live.
The incident is likely to intensify scrutiny of how quickly centralized platforms adopt or become exposed to Ethereum protocol upgrades without fully hardening their defenses. Continue reading at Cointelegraph.
