Ethereum account abstraction was intended to spare ordinary users the burden of seed phrases while giving them the convenience and security of smart contract wallets. But if all it takes is tricking you into signing an apparently harmless delegation credential, hackers can legally borrow code-execution privileges to drain every dormant asset. For the decentralized finance ecosystem as a whole, is this an upgrade to the user experience—or a new kind of security risk?
【Dormant funds drained in a flash: $3.55 million in cross-chain assets transferred via EIP-7702】
According to the latest report from The Defiant and monitoring by Phalcon, a product of on-chain security firm BlockSec, an address (0x24a9) that had previously received funds from Tornado Cash recently used an Ethereum wallet (0x4943) to claim and transfer approximately $3.55 million in previously unclaimed cross-chain assets. The transferred assets included USDT, USDC, DAI, and Ether (ETH), and originated from cross-chain bridges such as Polygon Agglayer and NEAR Rainbow Bridge.
Notably, before the funds were moved, on-chain researcher stuckfunds.eth sent multiple on-chain memo messages to 0x4943, kindly alerting the address that it still had a large amount of unclaimed funds. However, the transaction that ultimately claimed and transferred the assets was initiated using the EIP-7702 account delegation mechanism introduced in Ethereum’s Pectra upgrade. The proposal allows traditional externally owned accounts (EOAs) to temporarily delegate contract-execution code to a specific contract, enabling batched transactions and automated execution. BlockSec Phalcon’s analysis noted that on-chain records show the delegation authorization was cryptographically valid, but it is impossible to confirm whether the holder knowingly authorized it, whether their private key had been compromised, or whether they fell victim to a new type of phishing scam involving malicious authorization signatures (Authorization Tuples).
【The double-edged sword of account abstraction: Ethereum’s security premium and ETH value capture】
What does this mean for readers? On the surface, this is a transfer of funds from an individual dormant account. But from the perspective of institutional investors, EIP-7702 is a key building block in Ethereum’s transition toward account abstraction across its ecosystem. The malicious delegation risk it has faced since being deployed on mainnet has direct implications for the overall security premium of the Ethereum network and the value-capture potential of its underlying asset, ETH. If wallet front ends fail to establish dynamic threat detection and security-warning standards for EIP-7702 delegation targets, the spread of attacks that can drain accounts without stealing private keys could undermine institutional investors’ long-term confidence in storing large sums in standard Ethereum wallets.
On the secondary market, Ether was trading at around $2,492 on Binance’s spot market, down approximately 0.16% over 24 hours, with daily spot trading volume exceeding $356 million. Technical indicators show that, following a recent risk-off pullback, ETH spot buying support has formed a dense cluster in the $2,470–$2,480 range. The market has not reacted to the on-chain security concerns with irrational panic selling, but prices remain capped by the 20-day moving average, currently around $2,662.
【Key factors to watch: adoption of authorization-filtering protocols and the $2,480 support level】
Looking ahead to market movements and the on-chain ecosystem, investors should closely track two key signals that can be objectively monitored:
First, the adoption of EIP-7702 authorization-filtering protocols and revocation standards. Following this incident, whether leading wallets such as MetaMask and Rabby, along with security infrastructure providers, roll out mandatory risk screening and one-click revocation for EIP-7702 authorization tuples in the near term—and whether Ethereum core developers promote stricter delegation allowlist standards—will be objective technical indicators for assessing whether the security premium of account abstraction can recover;
Second, whether Binance spot prices hold the previous low of $2,480 and overcome resistance from the moving average at $2,550. On the daily chart, ETH is currently forming a multi-layered base near $2,480. If spot trading volume picks up over the weekend and prices successfully move above $2,550—breaking through resistance from the short-term converging triangle—ETH could attempt a further recovery toward the 20-day SMA at $2,662. Conversely, if rising risk aversion across the broader market pushes the daily candle close below support at $2,470, prices may need to test the $2,380–$2,420 range for deeper liquidity support.
These are personal views and information compiled for reference only, not investment advice. DYOR.
$ETH #Ethereum #Crypto
【Dormant funds drained in a flash: $3.55 million in cross-chain assets transferred via EIP-7702】
According to the latest report from The Defiant and monitoring by Phalcon, a product of on-chain security firm BlockSec, an address (0x24a9) that had previously received funds from Tornado Cash recently used an Ethereum wallet (0x4943) to claim and transfer approximately $3.55 million in previously unclaimed cross-chain assets. The transferred assets included USDT, USDC, DAI, and Ether (ETH), and originated from cross-chain bridges such as Polygon Agglayer and NEAR Rainbow Bridge.
Notably, before the funds were moved, on-chain researcher stuckfunds.eth sent multiple on-chain memo messages to 0x4943, kindly alerting the address that it still had a large amount of unclaimed funds. However, the transaction that ultimately claimed and transferred the assets was initiated using the EIP-7702 account delegation mechanism introduced in Ethereum’s Pectra upgrade. The proposal allows traditional externally owned accounts (EOAs) to temporarily delegate contract-execution code to a specific contract, enabling batched transactions and automated execution. BlockSec Phalcon’s analysis noted that on-chain records show the delegation authorization was cryptographically valid, but it is impossible to confirm whether the holder knowingly authorized it, whether their private key had been compromised, or whether they fell victim to a new type of phishing scam involving malicious authorization signatures (Authorization Tuples).
【The double-edged sword of account abstraction: Ethereum’s security premium and ETH value capture】
What does this mean for readers? On the surface, this is a transfer of funds from an individual dormant account. But from the perspective of institutional investors, EIP-7702 is a key building block in Ethereum’s transition toward account abstraction across its ecosystem. The malicious delegation risk it has faced since being deployed on mainnet has direct implications for the overall security premium of the Ethereum network and the value-capture potential of its underlying asset, ETH. If wallet front ends fail to establish dynamic threat detection and security-warning standards for EIP-7702 delegation targets, the spread of attacks that can drain accounts without stealing private keys could undermine institutional investors’ long-term confidence in storing large sums in standard Ethereum wallets.
On the secondary market, Ether was trading at around $2,492 on Binance’s spot market, down approximately 0.16% over 24 hours, with daily spot trading volume exceeding $356 million. Technical indicators show that, following a recent risk-off pullback, ETH spot buying support has formed a dense cluster in the $2,470–$2,480 range. The market has not reacted to the on-chain security concerns with irrational panic selling, but prices remain capped by the 20-day moving average, currently around $2,662.
【Key factors to watch: adoption of authorization-filtering protocols and the $2,480 support level】
Looking ahead to market movements and the on-chain ecosystem, investors should closely track two key signals that can be objectively monitored:
First, the adoption of EIP-7702 authorization-filtering protocols and revocation standards. Following this incident, whether leading wallets such as MetaMask and Rabby, along with security infrastructure providers, roll out mandatory risk screening and one-click revocation for EIP-7702 authorization tuples in the near term—and whether Ethereum core developers promote stricter delegation allowlist standards—will be objective technical indicators for assessing whether the security premium of account abstraction can recover;
Second, whether Binance spot prices hold the previous low of $2,480 and overcome resistance from the moving average at $2,550. On the daily chart, ETH is currently forming a multi-layered base near $2,480. If spot trading volume picks up over the weekend and prices successfully move above $2,550—breaking through resistance from the short-term converging triangle—ETH could attempt a further recovery toward the 20-day SMA at $2,662. Conversely, if rising risk aversion across the broader market pushes the daily candle close below support at $2,470, prices may need to test the $2,380–$2,420 range for deeper liquidity support.
These are personal views and information compiled for reference only, not investment advice. DYOR.
$ETH #Ethereum #Crypto