VEER later said the Binance attack appeared broader than a single malicious signature, but that EIP-7702 gave attackers “a handy sweep button on Ethereum.”
Cointelegraph reported that Ethereum community member VEER said EIP-7702 gave attackers a handy sweep button on Ethereum.
This line is our short summary of the quote below. The quote is the evidence.
Cited in theories
- EIP-7702 caused the hack: Evidence for. A handy sweep button on Ethereum.
Other statements from the same source
Ido Ben-Natan warned that similar signing-system attacks threaten other exchanges and said transaction simulation could help detect malicious requests before they receive approval.
Ben-Natan warned that similar signing-system attacks threaten other exchanges and said transaction simulation could help detect malicious requests before they receive approval.
Ivo Georgiev stated that EIP 7702 is a problem because it is very poorly understood.
“This is a problem with EIP 7702, it’s just very, very poorly understood,” Georgiev said.
The speaker warned that exchange engineers might overlook the need to revoke a malicious EIP-7702 delegation after regaining control of their systems.
He said attackers could have drained the funds through other methods, but warned that exchange engineers might overlook the need to revoke a malicious EIP-7702 delegation after regaining control of their systems.
Ido Ben-Natan said attackers may have used a compromised developer’s computer to gain access to Binance’s wallet-signing infrastructure.
Ben-Natan said attackers may have used a compromised developer’s computer to gain access to Binance’s wallet-signing infrastructure.
Cointelegraph quoted the speaker as saying that ultimately the signer signed a transaction that they shouldn't have.
“The takeaway is that ultimately the signer signed a transaction that they shouldn’t have,” he said.