Blockaid co-founder Ido Ben-Natan said a preliminary assessment suggests attackers may have manipulated Binance’s transaction-signing system rather than stolen private keys in a suspected hack involving more than $2.5 billion in crypto. Binance has not confirmed how the theft occurred.
Blockaid said its onchain analysis found that an attacker bundled 50 EIP-7702 authorizations into one transaction targeting Binance 14, and that one reportedly met the account’s required nonce. It said the account was then delegated to an unverified contract that let a designated operator drain tokens and Ether. Ben-Natan said possible compromise of multiple devices and movement through Binance’s network remain unconfirmed.