Binance Hot Wallets Drained Across Chains in Roughly Half an Hour, Losses Near $6.3B
On October 29, 2026, Binance hot wallets on several blockchains sent funds to an attacker within about thirty minutes. Binance estimates total losses at around $6.3 billion, while Chainalysis puts the figure near $6.4 billion, which would make it the largest crypto theft on record. On Ethereum, the attacker used EIP-7702 to make the busy Binance 14 wallet execute attacker-controlled contract code, and over 167,000 ETH and dozens of tokens left in a single transaction within minutes. No smart contract vulnerability or forged signature was involved, and Binance attributes the breach to a compromised DevOps laptop that gave access to a withdrawal-capable service. The malicious delegation remained active for nearly four hours before being cleared on October 30. The incident highlights how EIP-7702 can expand the damage from a signing compromise, since an authorization grants control of the account rather than approving a specific payment.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in