Binance Confirms Record $6.3 Billion Crypto Theft via Compromised Hot Wallet and EIP-7702 Exploit
Binance reported on October 30, 2026, that attackers stole approximately 6.3 billion dollars in cryptocurrency, marking the largest theft in the sector. The breach occurred on October 29 when unauthorized transfers drained a hot wallet over roughly 20 minutes after the attacker compromised the transfer authorization system. TRM Labs and Chainalysis attributed the operation with high confidence to the North Korean group TraderTraitor, linked to Lazarus, though Binance stated its own investigation has not yet identified the perpetrators. The attacker leveraged Ethereum's EIP-7702 feature to seize control of the wallet after preparing the operation for at least 36 hours, bypassing private key theft by forcing the exchange infrastructure to sign the transfers. Roughly 3 billion dollars have been traced and partially frozen with assistance from Tether and Circle, while Binance pledged to cover all losses through its SAFU fund and corporate capital. The exchange suspended withdrawals across multiple networks, restored deposits the following day, and is working with the FBI and U.S. Secret Service on the investigation.
BoletimSecOct 30, 2026Translated from Portuguese