“The recent EIP-7702 Upgrade Allows Ethereum Addresses to Function as Smart Contracts, IncreASING CONVENENCE BUT ALSO RISK.”, – WRITE: www.coindesk.com
The Whole Issue Is Tied to the Ethereum Improvement Proposal (EIP) -7702, Part of the Pectra Upgrade that Went Live Early Last MONTH. IT ALLOWS REGULAL ETHEREUM ADDRESSES, SECURED BY PRIVATE Keys, to Temporarily Operate As Smart Contracts, Facilitating Batched Transactions, Password Authentication and Sporting Limits.
The Regular Ethereum Addresses Delegate Control of Their Wallets to Smart Contracts, Granting Them Permission to Manage or Move Their Funds. While It Has Simplified The User Experience, It Has Also Created A Risk of Malicious Contracts Draining Funds.
As of Friday, more than 80% of Delegations Made Through EIP-7702 Involved Reused, Copy-Ant-Paste Contracts Designed to Automatical Scan And Identify Weak Wallets for Potent.
“OUR Research Team Found that Over 97% of All EIP-7702 Delegations Were Authorized to Multiple Contracts Using the Same Exact Code. These are SWEEPERSUSED TO AUTOMATICALLY DRAIN INCOMING ETH from Compromison Addresses, “Wintermute SAID ON X.
“The CrimeenJoyor Contract Is Short, Simple, and Widly Reused. This Copy-Pasted Bytecode Now Represents of the Majority Market Maker Added.
Notable Cases Include A Wallet That Lost Nearly $ 150,000 Through Malicious Batched Transactions in A Fishing Attack, As Anti-Scam Tracker Scam Snifffer Noted.
Still, The Large-Scale Money Drain Has Not Been Profitable for the Attackers. The CrimeenJoyors Spen Approximately 2.88 Eth to Authorize Authorize 79,000 Addresses. One Particular Address –0x8938383882FC2D0CD4D4D7952A3267A3B6DAE96704 – Handled More Half of these Authorizations, with 52,000 Permissions Granted to Granted More.
Per Wintermute’s Researcher, The Stolen Ether Can Be Trared by Analyzing the Code of the Tese Contracts. For the Above Example, The Eth Is Destined to Flow the Address –0x6f6bd3907428ae93bc58aca9EC9EC25AE3A80110428.
However, As of Friday, It Had No Inbound Eth Transfers. The Researcher Adeded that this pattern appears Consistent Across CrimeenJoyors as Well.
X Icon
