The stolen address from Binance has revoked the EIP-7702 authorization

According to on-chain data, one of the stolen hot wallets of Binance, Binance 14, revoked the EIP-7702 authorization on October 30 at 8:10 AM Beijing time. This incident involving Binance pertains to the EIP-7702 authorization mechanism, where after signing such authorization, the wallet will be taken over by a specific program until the authorization is revoked.

This attack exploited that mechanism. The attacker managed to have Binance's hot wallet sign an EIP-7702 authorization, delegating control of the wallet to a malicious cleanup contract pre-deployed by the attacker. Once the authorization took effect, the malicious contract gained permission to operate the wallet, allowing it to automatically transfer assets in bulk without requiring additional signatures from the wallet owner.