Blockaid Reveals How Hacker Took Control of Binance Wallet: One of 50 EIP-7702 Authorizations Succeeded
According to analysis by blockchain security firm Blockaid, the attacker used Ethereum’s EIP-7702 authorization mechanism to attack Binance’s Binance 14 hot wallet. Because the attacker could not determine the hot wallet’s live nonce, and EIP-7702 authorizations must match the account’s nonce at the time of transaction execution, the attacker submitted 50 authorizations with different nonces (18914775 to 18914824) in a single Type-4 transaction. Only one matched successfully, allowing the malicious delegation to take effect.
The successful authorization delegated the hot wallet’s account code to an unverified malicious asset-transfer contract. The contract allows only the address designated by the attacker to execute the sweep() function, which can transfer ETH and ERC-20 tokens from the wallet while retaining 1 ETH for gas fees. Subsequent incoming assets may also be at risk of being transferred.
The Binance hacker has finished dumping $UNI, $ENA, $PEPE, $LINK, $AAVE, $ONDO, and $WLD, swapping them for a total of 70,480 $ETH ($158.25M).
Sold 7.02M $UNI($39.63M) at $5.65.
Sold 217.5M $ENA($33.93M) at $0.16.
Sold 7.77T $PEPE($31.66M) at $0.0000041.
Sold 2.57M $LINK($26.05M) at $10.14.
Sold 127,953 $AAVE($14.27M) at $111.55.
Sold 21.85M $ONDO($6.62M) at $0.30.
Sold 17.32M $WLD($6.09M) at $0.35.
https://t.co/SJ0cyZ6e90
50 Sites That Show What Billionaires Buy and Read for Free🤯
1.) https://t.co/cIcoQvbjqM → Current portfolios of famous investors
2.) https://t.co/QQj7wDWcWd → Quarterly fund trades
3.) https://t.co/BrxhmyBCkR → Stock transactions of US politicians
4.) https://t.co/RfWsTr3QTL → Executives' own company stocks
5.) https://t.co/aWS0KD6vt9 → Making fund filings readable
6.) https://t.co/1yhEZsSPdC → Companies' official reports
7.) https://t.co/9OWna7yjXB → Buffett's letters since 1977
8.) https://t.co/O52dCsZu6A → Video archive of Buffett meetings
9.) https://t.co/TFfMQWwQ2N → Howard Marks' investor memos
10.) https://t.co/dRNnt9uChB → Research from Ray Dalio's firm
11.) https://t.co/nvt2Pl5Tpj → Dalio's principles for free
12.) https://t.co/YUoU108XUY → Jeremy Grantham's market notes
13.) https://t.co/b5pOAmpLN3 → Quantitative fund research
14.) https://t.co/ZLs76FQhmS → Damodaran's valuation data
15.) https://t.co/L820s1dmSL → Valuation professor's blog
16.) https://t.co/6Bpd2k1j5r → Morgan Housel's money writings
17.) https://t.co/xuK2VWo9jc → Mental models for decision-making
18.) https://t.co/ONTuXbCaUl → JPMorgan's free market guide
19.) https://t.co/yCeryDqxZW → Innovation-focused fund research
20.) https://t.co/MOOBwVuP9k → Venture capital essays
21.) https://t.co/XOgxWbHjxo → Value investing lecture notes
22.) https://t.co/EiVkBQ9gA1 → Columbia's value investing archive
23.) https://t.co/oaYXmdOCHW → Fed's economic data archive
24.) https://t.co/FzOVSmNIMd → Fed decisions and statements
25.) https://t.co/DddjZ1ajsW → European Central Bank data
26.) https://t.co/pqw9LLaXON → Reports from the central bank of central banks
27.) https://t.co/CCM0l1rBJU → Countries' economic indicators
28.) https://t.co/U62hXLAb4U → Companies' long-term charts
29.) https://t.co/XP6cPwAu1Z → Company financials for free
30.) https://t.co/VP4D0fEHOF → Companies' market cap rankings
31.) https://t.co/zwJ124PDWP → Stock screener and heat map
32.) https://t.co/Q1X0XFcyZr → Portfolio backtesting
33.) https://t.co/lYqM3DscQt → Charts and market analysis
34.) https://t.co/PO6nfbruvG → Professional market screener
35.) https://t.co/aw17Ma35Zh → Company activity reports archive
36.) https://t.co/d4FubgvLQF → SEC's investor education site
37.) https://t.co/RQgnAKnnqE → Passive investing encyclopedia
38.) https://t.co/d7FP8AvFDN → Financial terms dictionary
39.) https://t.co/nzzAeTmRYU → Free finance guides
40.) https://t.co/m0OWYFRPgR → CFA research publications
41.) https://t.co/i6pJ6F1v8l → Fund and stock evaluations
42.) https://t.co/B27V2BQELq → Companies' visual analysis
43.) https://t.co/D3kvCrKx35 → Archive of selected investment theses
44.) https://t.co/xmlZCazgpL → Seeing what's inside funds
45.) https://t.co/zzZUVMiuZX → European fund backtests
46.) https://t.co/oqEh42yAn5 → Investment writings with data
47.) https://t.co/SdEmuPgqIU → Market history notes
48.) https://t.co/5dIyRAMRAn → Investor psychology writings
49.) https://t.co/Epc20zaPFa → Explaining the economy with charts
50.) ourfiniteworld? → (see note)
The rich don't hoard information. They just don't tell you where it is.
Save it, follow @Liyana_Coder you'll need it.
Not investment advice.
@Liyana_Coder
Oracle $ORCL announced several AI partnerships and infrastructure updates at Oracle AI World in Las Vegas today.
Here's a breakdown of the major announcements:
- $NVDA: Expanding NVIDIA Vera Rubin Superclusters to multi-gigawatt scale. Vera Rubin NVL72 systems and Vera CPUs are now available on Oracle Cloud.
- $GOOGL: Bringing Google's custom TPU chips to Oracle Cloud starting in 2027, making Oracle the first hyperscaler outside Google to offer them. This includes TPU 8t for training and TPU 8i for inference.
- $CBRS: Partnering with Cerebras to bring high-speed AI inference systems to Oracle Cloud in 2027.
- SambaNova: Adding another specialized AI inference chip option to Oracle's cloud infrastructure.
- OpenAI: Expanding their partnership with four enterprise offerings that integrate ChatGPT and Codex into business workflows, cybersecurity, application development, and small-business operations.
- $SNOW: Bringing Snowflake's AI Data Cloud to Oracle Cloud as a native, first-party service, with customers able to purchase and manage it directly through Oracle.
ANT มา กระแส AI ก็ได้ไปต่อนิดนึง แต่โดยส่วนตัว moat ของกลุ่ม model AI ถูกตีแตกง่ายมาก ถ้าตัวไม่แรง user พร้อมเปลี่ยน กลายเป็นว่า herness มากกว่าที่ user จะไม่ค่อยเปลี่ยน เพราะ ข้อมูลทุกอย่าง settings ได้ที่แล้ว ขี้เกียจ set ใหม่