Binance Says It Found Additional Breach Path in $6.3 Billion Hack Through EIP-7702 Abuse
Binance, the global cryptocurrency exchange, said it has identified an additional breach path tied to the $6.3 billion hack. The attackers exploited the delegation feature in Ethereum Improvement Proposal 7702, or EIP-7702, to bypass normal approval procedures for a hot wallet.Cointelegraph reported on October 30 that Richard Teng, Binance's co-chief executive officer, said the attack extended beyond the access privileges of a single engineer.Binance said the attackers used EIP-7702's delegation feature to circumvent existing hot-wallet approval controls. The investigation also uncovered additional points of compromise beyond the route already identified.Teng said investigators have not so far attributed responsibility for the hack to any specific individual. As a result, it has not been determined whether any employee bears responsibility.