The risk of asset theft involving EIP-7702 was already warned about by developers on community forums two years ago.
on October 30, regarding the suspected hack of Binance, some analysts believe the attacker may have leveraged the Ethereum EIP-7702 mechanism to gain control of wallets and withdraw funds. In response, X user 0xVEER noted that developer 0xjustadev warned about “such scenarios” as early as two years ago during discussions surrounding EIP-7702.
The attached screenshot indicates that in October 2024, within an Ethereum community forum discussion thread on EIP-7702 (Set EOA account code), a developer highlighted that current phishing attacks primarily target the relatively legible and easily spoofable EIP-712 signatures. They cautioned that the proposal could enable attackers to drain all valuable assets, including native tokens, using signatures that are much harder to read and spoof. Furthermore, they raised concerns that wallets might adopt highly centralized smart contract signature whitelists in response, marking a regression in both security and decentralization.
Currently, whether this incident is genuinely linked to EIP-7702 has not been officially confirmed by Binance. The aforementioned information reflects only community perspectives, and the situation remains ongoing. Please exercise caution.