Blockaid on-chain reconstruction of Binance EIP-7702 delegation and 50 nonce candidates

Evidence record

On-chain reconstruction with a separate detection vendor and a commercial-product disclosure; counts and categorization distinguished from Binance reporting.

Read the original source ↗

Claim-level citations (2)

• supportsBinance wallet-signing compromise used an internal AI tool in its access chain and persistent EIP-7702 delegation: Blockaid describes one Ethereum type-4 transaction carrying 50 EIP-7702 authorization entries, of which one valid nonce authorization installed attacker delegation before a subsequent sweep.

  The Nonce Spray: 50 Authorizations, One Hit; EIP-7702 delegation timeline

• supportsBinance wallet-signing compromise used an internal AI tool in its access chain and persistent EIP-7702 delegation: Blockaid observed a single type-4 transaction at 20:20:59 UTC carrying 50 EIP-7702 nonce-candidate authorizations; 49 failed nonce matching and one installed the sweeper delegation. This is a count of authorizations inside one on-chain transaction, not proof that Binance meant the same unit by its separate count of signing transactions.

  The Exploit: How it Unfolded, subsection 2, The Nonce Spray: 50 Authorizations, One Hit