He said attackers could have drained the funds through other methods, but warned that exchange engineers might overlook the need to revoke a malicious EIP-7702 delegation after regaining control of their systems.
The speaker warned that exchange engineers might overlook the need to revoke a malicious EIP-7702 delegation after regaining control of their systems.
This line is our short summary of the quote below. The quote is the evidence.
Other statements from the same source
Ido Ben-Natan warned that similar signing-system attacks threaten other exchanges and said transaction simulation could help detect malicious requests before they receive approval.
Ben-Natan warned that similar signing-system attacks threaten other exchanges and said transaction simulation could help detect malicious requests before they receive approval.
Ivo Georgiev stated that EIP 7702 is a problem because it is very poorly understood.
“This is a problem with EIP 7702, it’s just very, very poorly understood,” Georgiev said.
Ido Ben-Natan said attackers may have used a compromised developer’s computer to gain access to Binance’s wallet-signing infrastructure.
Ben-Natan said attackers may have used a compromised developer’s computer to gain access to Binance’s wallet-signing infrastructure.
Cointelegraph quoted the speaker as saying that ultimately the signer signed a transaction that they shouldn't have.
“The takeaway is that ultimately the signer signed a transaction that they shouldn’t have,” he said.
Cointelegraph reported that Ambire CEO Ivo Georgiev said EIP-7702 made little difference because the hackers already had the ability to authorize transactions.
Ivo Georgiev, co-founder and CEO of Ethereum wallet provider Ambire, said that EIP-7702 made little difference to the attack because the hackers already had the ability to authorize transactions.