Binance Says It Found Additional Breach Path in $6.3 Billion Hack Through EIP-7702 Abuse
Summary
- Binance said it had identified an additional breach path linked to the $6.3 billion hack.
- It said the attackers exploited the EIP-7702 delegation feature to bypass hot-wallet approval procedures.
- It said investigators have not attributed responsibility for the hack to any specific individual, and employee liability has not been determined.
Forecast Trend Report by Period
Binance, the global cryptocurrency exchange, said it has identified an additional breach path tied to the $6.3 billion hack. The attackers exploited the delegation feature in Ethereum Improvement Proposal 7702, or EIP-7702, to bypass normal approval procedures for a hot wallet.
Cointelegraph reported on October 30 that Richard Teng, Binance's co-chief executive officer, said the attack extended beyond the access privileges of a single engineer.
Binance said the attackers used EIP-7702's delegation feature to circumvent existing hot-wallet approval controls. The investigation also uncovered additional points of compromise beyond the route already identified.
Teng said investigators have not so far attributed responsibility for the hack to any specific individual. As a result, it has not been determined whether any employee bears responsibility.
JH Kim
reporter1@bloomingbit.ioHi, I'm a Bloomingbit reporter, bringing you the latest cryptocurrency news.