EIP-7702 upgrade enables Binance hot wallet hack, resulting in $64 million theft
The EIP-7702 upgrade, activated on Ethereum in May 2025, allows standard externally-owned accounts to temporarily use smart contract code. On October 29, 2026, attackers exploited this feature to convert a Binance hot wallet into a sweeper, transferring approximately $64 billion across 10 blockchains in about 20 minutes. Blockchain analysts TRM Labs and Chainalysis attributed the hack to the TraderTraitor group linked to North Korea. The attack involved pre-signed delegations that allowed the attacker's code to control the wallet's funds.
This report details how a core Ethereum upgrade intended to improve wallet functionality was exploited in one of the largest crypto heists in history, highlighting critical security risks associated with account abstraction technology.
Source: PANews · Articles · panewslab.com
Article discussion
Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.