Binance’s $6.3 B Hack Likely Enabled by Compromised Signing System, Not EIP‑7702

Binance confirmed a $6.3 billion loss, the largest in crypto history, after attackers accessed its wallet‑signing infrastructure. Blockchain security firm Blockaid’s co‑founder Ido Ben‑Natan said the breach likely began with a compromised engineer’s laptop, allowing the attackers to sign malicious transactions. While Ethereum’s EIP‑7702 upgrade—introduced in May 2025 to enable bundled transactions and sponsored gas—was not the root cause, Ben‑Natan argued it could have helped attackers execute the theft in a single sweep, bypassing additional security checks. Binance’s investigation revealed multiple breach points beyond the initial laptop compromise. EIP‑7702 had already faced security concerns, with early delegations pointing to malicious contracts that drained wallets, and later incidents involving WLFI token holders. Experts warn that similar signing‑system attacks could threaten other exchanges, and that transaction simulation could detect malicious requests before approval.