The $6.3 Billion Binance Hack: When Valid Signatures Aren't Enough
Details
We are migrating to a new calendar! Please RSVP at the following link if you are interested in attending our upcoming Blockchain Meetup:
This month we will examine the October 2026 Binance hack, how attackers were able to compromise cryptocurrency wallets, and why even sophisticated security systems can fail.
On October 29, 2026, attackers carried out a coordinated theft involving approximately $6.3 billion in cryptocurrency across multiple blockchains. Investigators identified a particularly fascinating attack on Ethereum involving EIP-7702, a feature that allows ordinary wallets to delegate execution to smart contracts. By exploiting Binance's wallet-signing infrastructure, the attackers were able to redirect a hot wallet's execution to malicious code and transfer billions in assets. Remarkably, Binance reported no evidence that the underlying private keys had been stolen.
This incident raises fundamental questions about how cryptocurrency security actually works. If a digital signature is valid, does that mean a transaction was legitimately authorized? Do newer wallet capabilities introduce dangerous security vulnerabilities? And what responsibilities do exchanges, wallet developers, and blockchain networks have when something goes wrong?
We'll walk through the attack in accessible language, explore the technical and organizational failures, and discuss what this case teaches us about the future of cryptocurrency security. No advanced technical background is required.
We will meet in the Enterprise Works building of the Research Park where there is open parking for guests and a CUMTD bus stop. Please RSVP so we know how many to expect, as lunch will be provided!