Binance hot wallet drained via EIP-7702 delegation; Blockaid says one of 50 authorizations succeeded on Binance 14 wallet

Blockchain security firm Blockaid says the attacker used Ethereum's EIP-7702 authorization mechanism to attack Binance's Binance 14 hot wallet, with one of 50 authorizations succeeding. The Tornado Cash-funded wallet drained 167,464 ETH (~$384M) and 1.6B USDT, taking over $6.28B across 8 blockchains in a coordinated exploit. Binance recovered $823M in USDC. Binance has not confirmed.

Detected & updated continuously · Source: Nebula