TRM Labs reported that the attacker prepared for the $6.3 billion Binance theft at least 36 hours in advance, funding operational wallets via Tornado Cash and utilizing Ethereum EIP-7702 delegation authorizations

From the articleBinance's $6.3 billion hack: What we know and what comes nextAlso in TRM and Chainalysis Tie $6.4B Binance Hack to North Korea's TraderTraitor - Decrypt, Binance $6.3B Hack Raises Questions Over Ethereum EIP-7702, Binance hack began with a $296 million XRP drain after 36-hour preparation