A study published at USENIX Security ’26 shows that researchers identified 65,340 high-risk crypto addresses involving abuse on Ethereum and the BNB Chain, with associated losses of 126,982.94 ETH and 17,726.7 BNB native tokens. The study estimates that the total losses associated with these addresses exceed $574.8 million; among them, two newly described active attack vectors directly account for about $15.7 million of losses (2.7%).
The first category involves misuse of contract accounts and exploitation of deterministic contract addresses; the second involves using EIP-7702 to delegate an account that exposes its keys to malicious code, which then directly transfers deposits. The research team mined over 16.3 million deduplicated private keys by extracting from 63,004 GitHub repositories during the period from January 2015 to May 2025. The overall detection accuracy of the results was 99.11%.
The first category involves misuse of contract accounts and exploitation of deterministic contract addresses; the second involves using EIP-7702 to delegate an account that exposes its keys to malicious code, which then directly transfers deposits. The research team mined over 16.3 million deduplicated private keys by extracting from 63,004 GitHub repositories during the period from January 2015 to May 2025. The overall detection accuracy of the results was 99.11%.