After Binance, check what your signing systems can approve

Binance's October 2026 security incident revealed that attackers obtained valid signatures to gain wallet authority without stealing private keys, according to its November 3 report. The attack involved social engineering, misuse of an internal AI tool, stolen credentials, and unauthorized access to its wallet-signing service. The attacker used an EIP-7702 delegation, allowing a wallet to sign a standing instruction, which remained in place until changed.