Binance hackers exploited the EIP-7702 mechanism to steal tokens from hot wallets, rehearsing the theft for hours beforehand.

SlowMist cosine monitoring revealed that Binance hackers used the EIP-7702 mechanism to steal tokens from Binance's hot wallet in bulk. The hackers conducted a rehearsal for several hours before the actual theft.