Binance breach shows why signing systems must catch wallet authority changes
CRYPTOBinanceredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Binance, a large cryptocurrency exchange, suffered an October 2026 security incident in which an attacker took user funds. The attacker got valid approvals from Binance's own signing system, which shows that a compromised server can misuse a protected key without ever stealing it.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Document every service and API that can request wallet signatures and restrict what each can authorise.
- Reject EIP-7702 delegation requests for custody accounts that do not need delegation, through both dedicated and generic signing interfaces.
- Protect funds with separate custody controls that the operational key cannot change, and test that delays and limits cannot be bypassed.
- Update detection rules so alerts cover delegation changes and module or ERC-4337 execution paths.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Trail of Bits
Who and what is in it
Companies