The $6.3 Billion Binance Hack: When Valid Signatures Aren't Enough

​Join the Champaign Blockchain Meetup at EnterpriseWorks in the University of Illinois Research Park for a discussion of one of the largest cryptocurrency thefts in history and what it reveals about the security of digital assets. We'll examine the October 2026 Binance hack, how attackers were able to compromise cryptocurrency wallets, and why even sophisticated security systems can fail. Please RSVP so we know how many to expect. Lunch will be provided.

​On October 29, 2026, attackers carried out a coordinated theft involving approximately $6.3 billion in cryptocurrency across multiple blockchains. Investigators identified a particularly fascinating attack on Ethereum involving EIP-7702, a feature that allows ordinary wallets to delegate execution to smart contracts. By exploiting Binance's wallet-signing infrastructure, the attackers were able to redirect a hot wallet's execution to malicious code and transfer billions in assets. Remarkably, Binance reported no evidence that the underlying private keys had been stolen.

​This incident raises fundamental questions about how cryptocurrency security actually works. If a digital signature is valid, does that mean a transaction was legitimately authorized? Do newer wallet capabilities introduce dangerous security vulnerabilities? And what responsibilities do exchanges, wallet developers, and blockchain networks have when something goes wrong?

We'll walk through the attack in accessible language, explore the technical and organizational failures, and discuss what this case teaches us about the future of cryptocurrency security. No advanced technical background is required.