Blockaid Says 50 EIP7702 Authorizations With Different Nonces Breached Binance 14 Hot Wallet
Blockaid traced the Binance 14 hot wallet breach to Ethereum's EIP7702. Unable to confirm the live nonce, the attacker packed 50 authorizations with nonces 18914775 to 18914824 into one Type4 transaction. Only one matched, delegating the wallet code to an unverified assettransfer contract that lets only the attacker call the sweep function to move ETH and ERC20 tokens, keeping 1 ETH for gas.