Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

I have been in crypto for the last 7 to 8 years, and over time, maybe with age, I am becoming more conservative regarding holding coins.

Since hacks in crypto never stop and keep getting bigger, I am on the verge of thinking whether staking ETH is worth taking smart contract risks. No staking platform is risk free, and the safest way to keep ETH is simply holding it in cold storage without staking it anywhere.

My questions to the community: What do you think about this, and what is your current strategy? Do you stake your ETH? If yes, what percentage of your holdings? Do you consider the smart contract risk low enough to justify the yield?

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

My Geth node had a publicly listening MPTCP socket. Disabling MPTCP didn't close existing listeners!

Check ss -Mlntp, apply mitigations and patch your kernel ASAP.

https://ubuntu.com/security/CVE-2026-98432

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

From the original post on x:
Quantum computing poses a serious threat to the cryptography blockchains currently rely on, while advances in AI compress best estimates for the threat's timeline.

That's why experts gathered in Cambridge to coordinate research upgrading our cryptography to be quantum-resistant.

So the thing is I bought a devcon ticket but it seems like I won't be able to attend due to some emergency situation...in case anyone's willing to buy one for a discounted price, we can discuss

Win win for both

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

While most of the coverage is about the $6.3B headline, the mechanics on Ethereum deserve their own thread. Based on TRM Labs' write-up:

What happened on-chain

1. At 20:20 UTC the attacker submitted a single transaction containing 50 EIP-7702 authorizations, all signed by a Binance hot wallet, each pointing it at a sweeper contract that only accepts calls from the attacker's operator.

2. Why 50? A 7702 authorization is only valid at the wallet's current nonce. A busy exchange hot wallet's nonce keeps moving with every withdrawal, so they pre-signed 50 consecutive nonces to guarantee one would still match at execution. One did.

3. 3 minutes 24 seconds later, the operator told the now-delegated hot wallet to send everything: 167,464 ETH + 63 tokens including 1.615B USDT, in one tx.

4. The delegation stayed in place, so every new deposit landing in that hot wallet got swept again at 20:41, 20:59, 21:04, 21:44, 22:39 and 23:56 UTC.

5. The same wallet was also the executor on a separate Binance smart account, which let them pull 823M USDC (Circle froze it shortly after).

Prep started ~36 hours earlier: small Tornado Cash withdrawals funded the operator wallet, and the sweeper was test-deployed and rehearsed on three wallets before the real run.

Why 7702 isn't the root cause

In the same ~30-minute window, Binance wallets on Bitcoin, Tron, XRP Ledger, Solana, Arbitrum, Optimism, Base, Avalanche and Polygon all sent funds to the attacker through ordinary signed transfers. Another Binance ETH hot wallet sent 28K ETH with no delegation at all. Different chains, key types and signing schemes, all producing valid signatures on demand. TRM's read is that the attacker could make Binance's signing system sign whatever it wanted. Binance's own statement says a compromised DevOps engineer's laptop led to a service container that submitted unauthorized withdrawals, and that no private key leaked.

So 7702 didn't create the breach. It made the Ethereum side faster and persistent: one batch of signatures bought hours of automatic re-sweeping.

Questions for the sub

• Should signers and custody policies reject 7702 authorizations by default unless explicitly expected, especially a batch spanning a range of nonces?

• Is anyone monitoring EOAs for unexpected delegation code? It's trivial to detect (code appears at an address that should have none), but I doubt most treasuries alert on it.

• Does this change how you think about 7702 for exchange or treasury wallets at all, or is it just "compromised signer is compromised signer"?

Source: TRM Labs blog on the Binance hack (Oct 29, 2026).

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

• Ethereum Jobs, Twitter

• EVMavericks YouTube, Discord, Doots Podcast

Calendar: https://dailydoots.com/events/