i guess the hacker used a BYE NONCE hahahaha send tweet
One interesting note on the binance hack: the drain tx submitted 50 EIP7702 auths, each with a sequential nonce.
Only one is the correct, valid nonce for a tx.
Likely the attacker collected all 50 over some period of time, not knowing what the correct nonce would be at the time of execution, and then submitted them all. Eth only accepts the valid one and the invalid ones get discarded