Binance hot wallets drained on Oct 29, 2026.Read the analysis
CryptGuard
Wallet hacked?Sign inGet started
Free tool

EIP-7702 wallet scanner

Find out in seconds whether any address has been handed to a smart contract, the technique used to drain Binance on October 29, 2026. Then review every live token approval and revoke the risky ones.

What the scanner checks

For each chain, CryptGuard reads three things straight from public nodes: the account's code (empty for a normal wallet, a 23-byte delegation designator for a 7702-delegated one, or full bytecode for a contract wallet), its balance, and its transaction count. If a delegation exists, we name the delegate contract and check whether it has code.

On Ethereum we also rebuild your complete approval history from the chain index. We check every allowance live with allowance() and isApprovedForAll(), and ignore the fake approval events spam tokens emit to scare you.

Why delegations matter now

EIP-7702 went live with Ethereum's Pectra upgrade in May 2025. It lets a regular wallet run smart-contract code, which is useful for batching and gas sponsorship. But a single authorization to the wrong contract gives that contract full control of the account on that chain, or on every chain if it was signed with chainId 0. Wallet-drainer kits now ask for these authorizations, and the October 2026 Binance incident used the same mechanism against an exchange hot wallet.

FAQ

Frequently asked questions

How do I check if my wallet has an EIP-7702 delegation?
Paste your address above. CryptGuard reads the account code on 7 chains. A delegated account has code starting with 0xef0100 followed by the delegate contract address, and we show which contract it is.
My wallet shows as delegated. Am I hacked?
Not necessarily. MetaMask, Ambire and other wallets offer "smart account" upgrades that use EIP-7702. If you enabled one, the delegation is expected. If you never did, assume the account is compromised and move your funds to a brand-new wallet immediately.
How do I remove a delegation?
Use your wallet's option to switch back to a standard account. Under the hood it signs a new authorization that points to the zero address. If an attacker controls the delegation, revoking may not help (they may hold pre-signed backups), so moving funds comes first.
Is this free?
Yes. Scanning is free and needs no account. To be alerted the moment a delegation appears, add the address to a free watchlist.

Watch your wallet around the clock

A scan is a snapshot. The Binance drain took 3 minutes 24 seconds. CryptGuard checks your addresses every 30 seconds and alerts you on Telegram, Discord or Slack.

Start freeSee pricing