Lookonchain APP

App Store

SlowMist’s Yu Xian: The Binance attacker’s on-chain operations were crude and had prior rehearsals, with EIP-7702 used solely to streamline bulk fund siphoning.

56 minutes ago

SlowMist founder Yu Xian posted that attackers adopted EIP-7702 on Ethereum primarily to facilitate the bulk siphoning of tokens from Binance-associated hot wallets. On-chain data shows the attackers' operations were relatively crude, and they conducted several hours of rehearsal preparations before the actual token heist. One can refer to the first five transaction records of the relevant addresses for details. Yu Xian noted that the EIP-7702 mechanism itself has no issues, and even without the protocol, there would still be other ways to achieve similar effects.

Relevant content

He Yi: The platform is currently undergoing security scans, and user funds are secure.

Binance co-founder He Yi published a statement thanking the community for their collective support, noting that the platform is currently conducting security scans to ensure the safety of users' funds. He Yi also reposted a post from on-chain monitoring account Specter regarding the progress of frozen stolen assets, which states that approximately $2.8 billion in related stolen assets have been frozen so far, and calls on First Digital to assist in freezing the remaining roughly $3.45 million in FDUSD.

8 minutes ago

Coinbase CEO has offered assistance to Binance and is blocking transfers to the stolen wallet.

Coinbase CEO Brian Armstrong stated in a post that his team is doing its utmost to support the ongoing situation surrounding the Binance hack, including blocking transfers to the compromised wallets, and has proactively reached out to Binance to offer assistance. Armstrong noted that the crypto industry should collaborate at this juncture, share useful information publicly, prioritize protecting customers regardless of which platform they use, and those capable of assisting should step forward. The crypto industry has always emerged stronger after every difficult period, and this time will be no exception.

8 minutes ago

The three major U.S. stock index futures continued to decline, with Nasdaq futures falling by 2%.

According to data from the BIT Stock Platform, the three major U.S. stock index futures continue to decline: Nasdaq futures fell 2%, and S&P 500 futures fell 1%. Amazon and Intel dropped 7.7% and 23% respectively in after-hours trading, as their previously released earnings reports failed to impress investors. Tech stocks followed suit in after-hours and overnight trading, with Nvidia down 2.5%, Micron Technology down 4.4%, and Oracle down 4%.

8 minutes ago

Whale Closes $80.56M $ETH Position to Avoid Liquidation, Down $38M

The whale holding a 93,184 $ETH ($214M) long closed 36,517 $ETH ($80.56M) to avoid liquidation and still holds 56,667 $ETH ($125M). New liquidation prices: $2,122.44 and $2,129.72. The whale has lost over $38M in total.

8 minutes ago

Trader 'Maji' suffered 8 consecutive liquidations amid the price decline, with their Hyperliquid account balance now standing at just $1.5.

According to Lookonchain monitoring, crypto personality "Big Brother Ma Ji" Huang Lichang has been liquidated 8 times consecutively over the past six hours, with all his positions cleared, leaving his Hyperliquid account with a balance of just $1.50.

8 minutes ago

EIP-7702 developer: EIP-7702 itself has no vulnerabilities, but it accelerated the transfer of stolen assets from Binance's hot wallet.

ZeroDev founder and EIP-7702-related developer Derek Chiang stated in a post that EIP-7702 itself has no flaws, and users of wallets supporting the standard—including MetaMask, Uniswap, and Ambire—need not panic. The account abstraction proposal allows external accounts to insert smart contracts after signing an authorization, enabling batch transactions such as one-click authorization and swaps. However, this same functionality lets attackers transfer all tokens in a single transaction. In the Binance hot wallet breach, attackers exploited this to siphon ETH, USDT, and 62 other tokens in one transaction. Without EIP-7702, attackers would have had to initiate separate transactions for each token, potentially competing with the exchange’s normal withdrawals for nonce values, so EIP-7702 enabled attackers to steal funds faster and in larger volumes. Chiang noted that for attackers to use EIP-7702, they either need access to a private key or to trick Binance into signing an EIP-7702 authorization; the latter scenario is unlikely but cannot be ruled out ahead of the official post-mortem. His advice to wallet developers and hot wallet operators: never expose interfaces that request EIP-7702 authorization or sign raw messages to the public, and users should opt for well-known wallets.

8 minutes ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano