The Ethereum Improvement Proposal 7702 smart contract upgrade allowed the attacker to automatically sweep incoming customer deposits directly out of the Binance hot wallet during the October 29 Binance hack