EIP-7702 just became the most expensive lesson in crypto history.
Pectra upgrade introduced this feature to let EOAs temporarily act like smart contracts—batch txs, gas abstraction, all the good stuff. Sounds bullish for UX, right?
Wrong.
North Korean hackers got hold of Binance hot wallet signatures, delegated authorization via EIP-7702, and drained $6.4B in October 2026. Full control. Zero friction.
This isn't just a hack. It's a wake-up call:
• Delegated code = full wallet authority
• No guardrails = catastrophic risk
• Account abstraction is the future, but we're not ready
Ethereum is evolving fast. But so are the attack vectors. If you're not auditing every delegation, you're exit liquidity.
Stay paranoid. Stay liquid.
Pectra upgrade introduced this feature to let EOAs temporarily act like smart contracts—batch txs, gas abstraction, all the good stuff. Sounds bullish for UX, right?
Wrong.
North Korean hackers got hold of Binance hot wallet signatures, delegated authorization via EIP-7702, and drained $6.4B in October 2026. Full control. Zero friction.
This isn't just a hack. It's a wake-up call:
• Delegated code = full wallet authority
• No guardrails = catastrophic risk
• Account abstraction is the future, but we're not ready
Ethereum is evolving fast. But so are the attack vectors. If you're not auditing every delegation, you're exit liquidity.
Stay paranoid. Stay liquid.