According to BlockBeats news on August 24, Yu Xian, the founder of Slow Fog, shared a security alert released by ScamSniffer, indicating that today another user lost approximately 1.54 million dollars due to signing a phishing batch transaction related to EIP-7702, involving multiple tokens staked on Ethereum such as ETH and BTC. The mechanism involves EIP-7702, which delegates the user's EOA address authorization to MetaMask: EIP-7702 Delegator, and completes subsequent token transfer operations through contract calls. This phishing method has been industrialized by mainstream phishing groups, and if users are inadvertently induced into trading, they will lose all account assets. Users are reminded to verify the authenticity of the website and links before confirming transactions to prevent fraud. Previously, on August 22, ScamSniffer monitored that a user signed a phishing batch EIP-7702 transaction request disguised as a Uniswap swap transaction, resulting in a loss of approximately 1 million dollars worth of tokens and NFTs. Attackers disguised as the Uniswap trading interface induced users to sign transactions and embedded malicious code or authorizations within the transactions.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
Security Alert: Beware of the EIP-7702 phishing batch trading trap
According to BlockBeats news on August 24, Yu Xian, the founder of Slow Fog, shared a security alert released by ScamSniffer, indicating that today another user lost approximately 1.54 million dollars due to signing a phishing batch transaction related to EIP-7702, involving multiple tokens staked on Ethereum such as ETH and BTC. The mechanism involves EIP-7702, which delegates the user's EOA address authorization to MetaMask: EIP-7702 Delegator, and completes subsequent token transfer operations through contract calls. This phishing method has been industrialized by mainstream phishing groups, and if users are inadvertently induced into trading, they will lose all account assets. Users are reminded to verify the authenticity of the website and links before confirming transactions to prevent fraud. Previously, on August 22, ScamSniffer monitored that a user signed a phishing batch EIP-7702 transaction request disguised as a Uniswap swap transaction, resulting in a loss of approximately 1 million dollars worth of tokens and NFTs. Attackers disguised as the Uniswap trading interface induced users to sign transactions and embedded malicious code or authorizations within the transactions.