Ethereum EIP-7702 new vulnerability exploited madly by hackers, $150,000 wallet stolen in seconds!
On May 24, 2025, a phishing attack utilizing the key proposal EIP-7702 in the latest Ethereum upgrade "Pectra" broke out, with a wallet stolen for about $150,000. This vulnerability allows ordinary wallets to temporarily activate smart contract functions, and hackers designed hidden bulk token transfer scams taking advantage of this, allowing users to authorize multiple tokens to be emptied at once without their knowledge.
EIP-7702 enables wallets to perform complex operations in a single transaction, such as bulk transfers and paying Gas fees, but it also opens up new attack channels. Malicious hackers deceive users into approving a "trusted" delegated contract, silently executing bulk malicious transfers, leaving victims completely defenseless.
Security agency SlowMist confirmed that the notorious Inferno Drainer hacker group orchestrated this theft. They did not steal private keys but utilized wallet upgrade features to authorize token theft in bulk legally. This covert method significantly increased the success rate and concealment of the attack.
Moreover, the frequency of phishing attacks continues to rise, with monthly losses exceeding $5 million in April and a significant increase in the number of victims. The total amount stolen in 2024 reached nearly $500 million, indicating that hackers are continuously innovating their techniques to break through defenses. This EIP-7702 vulnerability has become the latest and most dangerous weapon.
Experts warn that users must verify authorizations cautiously, avoid clicking suspicious links, and ideally enable new features only through official wallet UIs. Verifying transaction sources and regularly checking token permissions are key to prevention. Security analysts remind that hackers are rapidly keeping up with technological advancements, and users cannot afford to be complacent.
In short, the new "smart" upgrades of Ethereum wallets, while bringing convenience, have also become new breakthroughs for hackers. Staying vigilant and ensuring fund security has become the top priority for crypto users.
On May 24, 2025, a phishing attack utilizing the key proposal EIP-7702 in the latest Ethereum upgrade "Pectra" broke out, with a wallet stolen for about $150,000. This vulnerability allows ordinary wallets to temporarily activate smart contract functions, and hackers designed hidden bulk token transfer scams taking advantage of this, allowing users to authorize multiple tokens to be emptied at once without their knowledge.
EIP-7702 enables wallets to perform complex operations in a single transaction, such as bulk transfers and paying Gas fees, but it also opens up new attack channels. Malicious hackers deceive users into approving a "trusted" delegated contract, silently executing bulk malicious transfers, leaving victims completely defenseless.
Security agency SlowMist confirmed that the notorious Inferno Drainer hacker group orchestrated this theft. They did not steal private keys but utilized wallet upgrade features to authorize token theft in bulk legally. This covert method significantly increased the success rate and concealment of the attack.
Moreover, the frequency of phishing attacks continues to rise, with monthly losses exceeding $5 million in April and a significant increase in the number of victims. The total amount stolen in 2024 reached nearly $500 million, indicating that hackers are continuously innovating their techniques to break through defenses. This EIP-7702 vulnerability has become the latest and most dangerous weapon.
Experts warn that users must verify authorizations cautiously, avoid clicking suspicious links, and ideally enable new features only through official wallet UIs. Verifying transaction sources and regularly checking token permissions are key to prevention. Security analysts remind that hackers are rapidly keeping up with technological advancements, and users cannot afford to be complacent.
In short, the new "smart" upgrades of Ethereum wallets, while bringing convenience, have also become new breakthroughs for hackers. Staying vigilant and ensuring fund security has become the top priority for crypto users.
