eip-7702

Slow Mist posted on platform X that MistEye detected potential suspicious activities related to Fusion. The root cause is a vulnerability in the underlying contract commissioned by an EOA account controlled by the project team through EIP-7702, which allows arbitrary external calls, enabling attackers to create and configure malicious circuit breaker contracts for PlasmaVault, thereby extracting funds from the contract.

ChainCatcher message, the GoPlus browser security plugin now fully supports EIP-7702 detection features, providing stronger security protection for Web3 users.This update includes core features such as real-time risk alerts, advanced threat detection, and protection against malicious contracts, capable of instantly identifying and intercepting various attacks based on the EIP-7702 protocol during transactions. As one of the first platforms to focus on the security threats of this protocol, GoPlus recommends users update their extensions in a timely manner to arm themselves with the latest security tools and ensure asset safety.

ChainCatcher news, according to Protos, Wintermute research shows that nearly half of the Ethereum Improvement Proposal 7702 (EIP-7702) user authorizations are associated with criminal activities such as phishing and fund theft.The report states that since May 7 of this year, users have activated this feature 1,580,930 times, with the Wintermute team marking 768,275 instances (48%) as crime-related. This sharply contrasts with Vitalik Buterin's earlier claim that this temporary smart contract feature would provide users with "superpowers" and "guardrails."EIP-7702 allows users to temporarily convert their signed accounts into smart contract wallets during transactions, aimed at enhancing user experience and security.

ChainCatcher news, Slow Mist's Yu Xian stated that a user was phished after participating in the WLFI private placement due to a private key leak, resulting in the complete theft of assets from their MetaMask wallet.The attack is suspected to exploit the EIP-7702 mechanism, where once the user injects gas or attempts to withdraw WLFI, their assets will be automatically transferred away. It is recommended that if rescue is needed, users can try to use Flashbots for a block race operation, but the threshold is relatively high. Users are reminded to be highly vigilant about the secondary risks brought by private key leaks.

ChainCatcher news, according to on-chain security analyst Scam Sniffer (@realScamSniffer), on August 26, a user lost $235,977 worth of crypto assets after signing a malicious EIP-7702 batch transaction.

ChainCatcher message, Slow Mist founder Yu Xian forwarded a security warning issued by Scam Sniffer, stating that today another user lost approximately $1.54 million due to signing EIP-7702 phishing batch transactions, involving multiple tokens staked on Ethereum, including ETH and BTC.This phishing method utilizes EIP-7702 to delegate the user's EOA address authorization to MetaMask: EIP-7702 Delegator, and completes subsequent token transfer operations through its contract calls. This phishing technique has been industrially practiced by mainstream phishing gangs, and if users are inadvertently induced to trade, they will lose all account assets.Yu Xian reminds users to verify the authenticity of websites and links before confirming transactions to prevent fraud.

ChainCatcher news, according to Scam Sniffer monitoring, some users have lost approximately $1.54 million due to signing EIP-7702 phishing batch transactions. The victims signed EIP-7702 phishing batch transactions, which included multiple token transfers and NFT approval operations.

ChainCatcher news, according to official information, GoPlus Security has issued a security alert. Recently, new phishing attacks targeting EIP-7702 smart accounts have re-emerged on the Ethereum mainnet, BNB Chain, and Base chain. In just 3 days since its launch, thousands of addresses have fallen victim, with losses exceeding $10,000 in crypto assets. The attackers use one address for authorization phishing; once the user authorizes, that address can automatically transfer the BNB or other tokens that the user subsequently deposits.The GoPlus security team reminds users: do not transfer or authorize to unknown addresses. The current 7702 scam is leveraging historically leaked private key addresses for large-scale phishing attacks, so please remain vigilant.

ChainCatcher news, according to TheBlock, Wintermute recently issued a warning that the Ethereum Pectra upgrade may expose users to automated attacks. The EIP-7702 feature (account abstraction improvement) in the Ethereum Pectra upgrade is being maliciously exploited, with over 80% of authorizations being used for automated attacks. Blockchain security company Scam Sniffer recently monitored a user who lost nearly $150,000 due to a phishing attack, where the attacker deployed a copy-paste contract named "CrimeEnjoyor" that can automatically drain wallets with leaked private keys. EIP-7702, proposed by Ethereum founder Vitalik Buterin, aims to enhance user experience by temporarily granting wallets smart contract functionality, including batch processing multiple transactions, sponsoring gas fees, using biometric/social verification, and setting single transaction limits.According to Wintermute's Dune dashboard, the vast majority of EIP-7702 authorizations flow to malicious contracts with similar functions. Security expert Taylor Monahan pointed out that EIP-7702 makes draining addresses "cheaper and easier." Wintermute commented, "It's both absurd and cruel that the same copied bytecode occupies most of the EIP-7702 authorizations."BlockBeats previously reported that SlowMist founder Yu Xian stated that the biggest users of the new Ethereum mechanism EIP-7702 are theft gangs (rather than phishing organizations). EIP-7702 allows for the automatic transfer of funds from wallets with leaked private keys or mnemonic phrases through authorizations, with over 97% of EIP-7702 delegations pointing to theft contracts.

ChainCatcher message, Slow Mist's Yu Xian posted on platform X, stating that the "most High" users of the new mechanism EIP-7702 are actually coin theft gangs (not phishing gangs), which facilitate the automatic transfer of related funds from wallet addresses with leaked private keys/mnemonic phrases... Over 97% of EIP-7702 delegations are authorized to such coin theft contracts.

ChainCatcher news, according to Beincrypto, the blockchain security platform Scam Sniffer has disclosed that the notorious phishing organization Inferno Drainer has recently launched a new type of attack utilizing the upcoming EIP-7702 feature in Ethereum, resulting in individual user losses of up to $150,000.EIP-7702 is a proposal in the Ethereum Pectra upgrade that allows external accounts (EOA) to temporarily act as smart contract wallets during transactions. Attackers exploit this by using authorized MetaMask wallets to batch transfer user assets, rather than directly controlling wallet permissions.Yuxian, the founder of Slow Mist Technology, stated that such attacks have evolved from traditional private key theft to utilizing the "execute" command to perform malicious authorizations in the background. Security experts recommend that users regularly check their token authorization status and use tools like Etherscan to identify abnormal delegation behaviors to mitigate potential risks.

ChainCatcher news, GoPlus Security today warned that with the Pectra upgrade, thousands of users enabling EIP-7702 smart accounts have encountered a dangerous phishing scam.Analysis of the contract code revealed that the malicious Delegator address (0x930fcc37d6042c79211ee18a02857cb1fd7f0d0b), once authorized, will automatically redirect ETH from user accounts to the scammer's wallet.Security experts remind users: only authorize the 7702 feature through official wallet applications, never click on "upgrade" options in external links or emails, and always verify the contract source code.

ChainCatcher news, according to official sources, OKX Wallet has taken the lead in supporting Ethereum's latest account abstraction standard EIP-7702, bringing users a more powerful and flexible on-chain interaction experience. Users can upgrade their traditional Ethereum EOA (Externally Owned Account) to a smart contract account, seamlessly connecting with the latest DApps and protocols while maintaining compatibility with current Ethereum standards. OKX Wallet has opened the upgrade portal, allowing users to choose to upgrade and experience it as needed. To ensure asset security, it is essential to operate through official channels, beware of phishing links and malicious websites, and avoid asset risks.It is reported that EIP-7702 is a key Ethereum Improvement Proposal that blurs the lines between traditional accounts and smart contract accounts by granting EOA addresses the ability to temporarily execute smart contract code, marking a significant breakthrough in account abstraction.

ChainCatcher news, according to The Block, the Ethereum mainnet successfully activated the Pectra upgrade at 6:05 AM Eastern Time, marking the most significant network update since the Merge in 2022.This hard fork includes 11 EIP improvement proposals, primarily focusing on three major areas: enhancing staking efficiency, optimizing user experience, and improving Layer2 scalability. The successful deployment of the testnet Hoodi in March laid the foundation for this upgrade. Pectra sets the stage for the Fusaka upgrade, which will introduce key technologies such as Verkle Trees and PeerDAS.Among the highlights of this upgrade is the EIP-7702 account abstraction scheme, which allows regular wallets to temporarily execute smart contract functions. In the future, users will be able to experience innovative features such as third-party payment of Gas fees, batch transaction packaging, and even recovery of lost private keys through social contacts. In terms of the staking mechanism, the ETH staking limit for a single validator node has been significantly increased from 32 to 2048, allowing institutional stakers to reduce operational complexity through node merging.For Layer2 scalability, the Blob data capacity per block has doubled to 6 (peaking at 9), and the proto-danksharding technology based on last year's Dencun upgrade continues to deepen, which is expected to reduce transaction costs on Rollup chains like Arbitrum by over 90%. The technical team has also addressed several long-standing pain points: the activation time for validator nodes has been reduced from 12 hours to 13 minutes, the execution layer can directly control node exits to enhance key security, and the on-chain storage of historical block hash data has improved the reliability of decentralized oracles.

ChainCatcher message, in response to the community's concerns about the security of EIP-7702, Ethereum co-founder Vitalik Buterin stated on Warpcast that the correct usage should be "to delegate permissions to a contract that has been thoroughly reviewed by a wallet team and the Ethereum community," and that contract should implement its logic in a secure manner.

ChainCatcher news, BNB Chain will undergo a mainnet Pascal hard fork on March 20, 2025, enhancing EVM compatibility and becoming one of the first public chains to adopt EIP-7702. This upgrade will introduce features such as Gas abstraction, EOA wallet smart contract capabilities, and batch transactions, providing users with a smoother experience and offering developers greater flexibility.Through the EIP-7702 proposal, BNB Chain will allow externally owned accounts (EOA) to temporarily possess smart contract functionalities during transactions while maintaining account security. This upgrade will significantly lower the barrier for users to enter Web3. For example, Gas fee abstraction allows users to complete on-chain interactions without holding the native token for gas fees in their accounts; at the same time, it enables dApps to sponsor gas fees for users and supports batch transactions, enhancing the on-chain experience for users.Previously, the Pascal hard fork was completed on the testnet. For the upcoming mainnet upgrade, before March 20, node operators and validators need to update to v1.5.7 (BSC) or v0.5.2/v0.5.6 (opBNB); exchanges and infrastructure providers must ensure compatibility before the hard fork, and developers need to test and update dApps to support the new transaction types.According to BNB Chain's 2025 technical roadmap, the community plans to conduct the Lorentz hard fork in April and implement the Maxwell hard fork upgrade in June, increasing block production speed to 0.75 seconds. Currently, this proposal is open for community feedback.

ChainCatcher message, Ethereum founder Vitalik Buterin stated in response to OP Labs member Mark Tyneway's question about "the insufficient number of wallets supporting EIP-7702" that he will work hard to ensure that 7702 (or a more powerful AA version thereafter, which fundamentally does not require any "ECDSA master key") is not just a blockchain feature, but a reality for users.