Wallet Delegation Becomes an Attack Surface
As wallets gain the power to delegate execution to contract code, each compromise of a signing system will drain more per incident, so authorization design (scope, expiry and independent verification of what is signed) becomes a main front of wallet and custody competition.
forming · confidence 40 · Emerging (watchlist) · tracking since October 31, 2026 · updated October 31, 2026
Why the conviction moved
- Oct 31Strengthened +6
EIP-7702 delegation let the Binance attacker sweep about $2.5 billion on Ethereum, and Charles Hoskinson called the sweeper code "seriously dangerous." The same day, Ethereum researchers posted drafts for short-lived, purpose-limited authorization and for wallet simulations third parties can check. The incident shows delegation raising the loss per compromise and puts scope, expiry and verification of what is signed on the protocol agenda.
Source trail
Supporting · October 31, 2026
EIP-7702 delegation let the Binance attacker sweep about $2.5 billion on Ethereum, and researchers propose narrower signing rules
EIP-7702 delegation let the Binance attacker sweep about $2.5 billion on Ethereum, and Charles Hoskinson called the sweeper code "seriously dangerous." The same day, Ethereum researchers posted drafts for short-lived, purpose-limited authorization and for wallet simulations third parties can check. The incident shows delegation raising the loss per compromise and puts scope, expiry and verification of what is signed on the protocol agenda.
CoinDesk
Unlock full source trail, score history, and daily updates.
Unlock TrendsTownsquare
Argue the thesis in Townsquare.