The attacker didn't know Binance 14's live nonce.
So they sprayed 50 EIP-7702 auths (18914775-18914824) in one type-4 tx.
Only 1 of 50 was a hit.
A 7702 auth is valid only for the current nonce at inclusion. The hot wallet was still firing. One nonce in that window landed.
$1.1B lost across 212 onchain exploits in H1 2026, more than all of 2025 combined.
↓ What Blockaid's data reveals about where the losses came from, and what onchain teams should watch in H2:
Today I’m excited to share that @blockaid_, a leader in web 3 security, is emerging from stealth with $33m in funding from a syndicate of some of the world’s greatest investors in Fintech, Cybersecurity and web3 — @ribbitcapital@variantfund Cyberstarts @sequoia and @greylockvc.
Introducing Blockaid, a leader in web3 cybersecurity that provides security tools to web3 builders that protect users from scams, phishing, and hacks.
https://t.co/VydtVjZA2j
It’s an honor to work with @MetaMask & @opensea to reinforce trust and security in the crypto space. Together, our goal is to enable users to explore web3 safely - and today’s release is the first step on our journey to make that goal a reality. (1/3)
As part of our ongoing commitment to keep our community safe and secure, we’re working with our friends @opensea and @blockaid_ on an experimental feature in @MetaMask that will warn users when interacting with known scams.