Binance is reported to have retaliated in real time against hackers and recovered $823 million in USDC. Chain analysis indicates that even after the attacker seized control of the wallet using malicious EIP-7702 authentication, Binance’s wallet keys continued to function. Binance is said to have executed transactions using the signing key through the compromised wallet to recover $823 million in USDC. The attacker obtained 50 valid signatures from the wallet key, one of which successfully activated malicious code, resulting in the exfiltration of 65 assets. Even after Tether and Circle added the attacker’s address to their blacklist, the exfiltration continued, with $200 million in USDT deposits cleared within just 100 seconds of arrival.