SlowMist Cosine: EIP-7702 was not the root cause of the Binance theft incident, but merely served to facilitate the batch sweeping of tokens from related hot wallets.

on October 30, Slowmist's Cos stated that the Binance attacker chose the EIP-7702 mechanism on Ethereum primarily to facilitate the batch sweeping of tokens from related hot wallets. Based on on-chain transaction records, the attacker's actions were relatively crude, as they had already conducted dry runs and preparations via related addresses hours before actually stealing the assets. Cos emphasized that there is nothing inherently flawed with the EIP-7702 mechanism itself, and even without this protocol mechanism, attackers could still carry out similar operations through other means.