Arbitrum Security Council froze ~$30.5M in funds related to a Binance incident involving EIP-7702 delegation exploit and potential compromise of Binance's signing key.
Security & Exploits ·
The Arbitrum Security Council has frozen approximately $30.5M in funds tied to a Binance-related exploit. The incident began as an EIP-7702 delegation vulnerability but has escalated to suggest a potential compromise of Binance's signing key infrastructure, raising concerns that extend beyond the initial delegation issue.
The EIP-7702 standard enables temporary delegation of signing authority, which attackers appear to have exploited. The discovery of possible key compromise indicates the attack may have involved unauthorized access to Binance's core signing systems rather than remaining limited to the delegation mechanism itself. Binance 14 remains compromised as of the latest reporting.
What remains unclear is the full scope of Binance's signing infrastructure exposure, how many additional keys or accounts may be at risk, and whether the frozen funds represent the complete extent of stolen assets. The mechanics by which the signing key was potentially compromised and the timeline of the breach are not yet detailed in available reporting.