币安遭攻击者利用以太坊EIP-7702绕过提现控制，CEO滕建新表示，漏洞预计造成63亿美元损失
Updated — view changes (3)
· body · New information from a source
A wallet labeled as belonging to Binance was emptied minutes after the EIP-7702 Ethereum upgrade went live, triggering a subsequent 780 million USDC transfer from a smart wallet it controls.Binance estimates losses at $6.3 billion and is rebuilding its withdrawal service after the intrusion.Security researchers say the upgrade did not cause the breach but may have helped attackers bypass withdrawal safeguards and destroy forensic traces.- A wallet labeled as belonging to Binance was swept minutes after it underwent an EIP-7702 delegation, according to The Defiant.
- The same delegated account later triggered a separate 780 million USDC transfer from a smart wallet it controls; The Defiant reports it remains unconfirmed whether these transfers were authorized.
- Binance CEO Richard Teng said the attacker used EIP-7702, an Ethereum upgrade that lets standard wallets temporarily behave like smart contracts, to bypass the exchange's withdrawal controls, according to The Defiant.
- Teng said Binance is rebuilding its withdrawal service following the intrusion, which the exchange estimates cost $6.3 billion.
- He also said the attackers destroyed tools and traces during the breach, The Defiant reported.
- Security experts cited by Cointelegraph said attackers could have drained Binance's wallets even without EIP-7702, but that the upgrade may have helped them get around withdrawal safeguards and amplified the losses.
· summary · New information from a source
A Binance-linked wallet was swept shortly after Ethereum's EIP-7702 upgrade enabled account delegation; the exchange disclosed a $6.3 billion breach.- A Binance-labeled wallet was swept minutes after an EIP-7702 delegation, and Binance CEO Richard Teng says the attacker used the Ethereum upgrade to bypass withdrawal safeguards in a breach estimated…
· headline · New information from a source
Binance-Labeled Wallet Drained Minutes After EIP-7702 Delegation; $6.3 Billion Breach Disclosed- Binance Attacker Used Ethereum's EIP-7702 to Bypass Withdrawal Controls, CEO Teng Says, in Breach Estimated at $6.3 Billion
Every change made to this story after publication is recorded here automatically. A factual error gets a correction as well, on the corrections page.
根据The Defiant报道，一个标记为币安所有的钱包在进行EIP-7702委托后数分钟内被清空。同一个被委托的账户随后从它控制的智能合约钱包中触发了一笔7.8亿USDC转账；The Defiant报道称目前仍未确认这些转账是否获得授权。
根据The Defiant报道，币安CEO理查德·滕表示，攻击者利用EIP-7702（一项以太坊升级，允许标准钱包临时表现得像智能合约）绕过了币安的提现控制。滕表示币安正在重建其提现服务，交易所估计这次漏洞造成63亿美元的损失。他还表示攻击者在漏洞期间破坏了工具和痕迹，据The Defiant报道。
Cointelegraph引述的安全专家表示，即使没有EIP-7702，攻击者也可能已经抽干币安的钱包，但该升级可能帮助他们绕过了提现保护措施并扩大了损失。
根据The Defiant的报道，Circle的USDC是与被委托账户相关的7.8亿转账所涉及的资产。
来源： The Defiant, Cointelegraph
本文仅供信息参考，不构成财务建议。
市场作何反应
每个数字都是本站自己的读数，并附上其比较基准。空白表示无人取得该读数，而非零。标题之前的时间窗会显示随机一小时跨过同一门槛的比例，因为没有零假设的命中率不构成结论。
事件回顾 2 条更新
- 快讯Binance-Labeled Wallet Drained Minutes After EIP-7702 Delegation; $6.3 Billion Breach Disclosed首次报道 · 2 个来源thedefiant.io · cointelegraph.com
- 报道Binance Attacker Used Ethereum's EIP-7702 to Bypass Withdrawal Controls, CEO Teng Says, in Breach Estimated at $6.3 Billion更新 · 2 个来源thedefiant.io · cointelegraph.com
