Binance CEO addresses EIP-7702 exploitation incident

The CEO of Binance has confirmed that a recent security breach originated from an exploit related to EIP-7702 delegation. This specific improvement proposal, designed to allow for more flexible account abstraction on the Ethereum network, appears to have contained a vulnerability that attackers manipulated to gain unauthorized access to user funds. The exchange has moved quickly to contain the situation and identify the affected accounts.

According to the official statement, the exploit allowed hackers to trick smart contracts into signing delegations that granted them control over specific assets. This technical flaw bypassed standard validation checks, permitting the attackers to move tokens without the explicit approval of the original owners. The Binance security team is currently conducting an audit to determine how widespread the impact is across the network.

This incident has sent shockwaves through the development community, as EIP-7702 was intended to simplify how users interact with decentralized applications. The news serves as a stark reminder that even well-intentioned upgrades can introduce unforeseen risks. Many experts are now calling for a temporary halt to any further implementations of this standard until a full root cause analysis is completed by the Ethereum foundation.

Traders and investors are advised to review their recent smart contract interactions and revoke any suspicious permissions that might have been granted during the window of the exploit. Binance has promised to keep the community informed as they work with security researchers to patch the weakness. The exchange remains committed to identifying the culprits and recovering as much of the lost capital as possible for the affected individuals.

While the market reacted with immediate volatility following the announcement, the focus remains on the response from the broader crypto infrastructure. This event highlights the ongoing struggle to balance innovation with security in a fast-paced environment. As 2026 progresses, the industry will likely see stricter testing requirements for all future Ethereum improvement proposals to ensure that such vulnerabilities are caught before they reach the mainnet.