金色财经|Oct 30, 2026 01:26
[Developer: EIP-7702 Protocol Not Broken; Attacker Requires Private Key or Induced Authorization] According to Jinse Finance, on October 30th, Derek Chiang, founder of ZeroDev and developer of Ethlabs, stated regarding the Binance hot wallet attack that the EIP-7702 protocol itself was not broken, and users should not panic because their wallets support this feature. Chiang pointed out that EIP-7702 allows external accounts to obtain smart contract functionality through authorization, including batch transaction execution. In this attack, the attacker used this mechanism to transfer ETH, USDT, and 62 other tokens in a single transaction, significantly improving the efficiency of fund transfers. However, to use this mechanism, the attacker must possess the relevant private key or induce Binance to sign an EIP-7702 authorization. The specific reason still needs confirmation from the official incident investigation report. He reminded wallet and exchange developers not to open EIP-7702 authorization signatures or arbitrary message signature interfaces to third parties.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink