星球日报|10月 30, 2026 01:26
[63% of EIP-7702 Authorization Transactions Involved Malicious Contracts: Research Reveals Wallet Authorization Risks] According to Odaily Planet Daily, a USENIX Security 2026 empirical study revealed that approximately 63% of the early 3.66 million EIP-7702 authorization transactions across seven blockchains were related to malicious contracts. The study confirmed losses exceeding $2.3 million and identified 924 malicious contracts. Most attacks involved phishing attacks that tricked users into signing authorizations, delegating their wallets to cryptocurrency-sweeping contracts. On-chain analysis shows that in today's Binance hot wallet outflow incident, attackers used EIP-7702 authorizations signed by hot wallets such as Binance 14 to delegate accounts to pre-deployed malicious cryptocurrency-sweeping contracts, subsequently transferring assets in bulk within minutes. Multiple estimates suggest the incident involved billions of dollars, and Tether, Circle, and others have frozen some stablecoins. This incident aligns with the risks identified in the research: whether it's a private key leak or misuse of the signature system, once an attacker obtains a legitimate authorized signature, EIP-7702 can grant them persistent execution control over the account until the authorization is revoked.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink