SlowMist's Cos: Binance attacker's on-chain operations were crude and rehearsed beforehand, using EIP-7702 merely for convenient batch sweeping.

BlockBeats news, October 30 - SlowMist founder Yu Xian posted that the attacker chose EIP-7702 on Ethereum mainly to facilitate the batch sweeping of tokens from Binance-related hot wallets. On-chain analysis shows that the operations were relatively crude, and the attacker conducted several hours of drill preparations before the actual theft. Reference can be made to the first 5 transaction records of the relevant addresses.

Yu Xian pointed out that the EIP-7702 mechanism itself has no issues, and even without this protocol, other methods could still achieve similar effects.