Crypto investor loses $1M in Uniswap scam exploiting Ethereum’s EIP-7702
A single phishing assault drained practically $1 million price of tokens from a crypto investor who unknowingly signed a batch of malicious transactions disguised as Uniswap swaps, based on blockchain safety agency Rip-off Sniffer.
In an Aug. 22 post on X, Yu Xiang, founding father of blockchain safety agency SlowMist, famous that the incident concerned 5 tokens siphoned by a transaction exploiting Ethereum’s new EIP-7702 mechanism.
He defined:
“From the attitude of a phished person, it goes like this: the person opens a phishing web site, a pockets signature immediate pops up, the person clicks affirm, and with simply that one motion, all priceless belongings within the pockets deal with vanish in a snap.”
EIP-7702 was launched within the Pectra upgrade to streamline the Ethereum person expertise. The characteristic permits a pockets to behave like a short lived good contract, making it potential to batch a number of transactions, allow fuel sponsorship, or set spending limits in a single step.
In precept, the delegation is revocable and network-specific. Nevertheless, attackers have discovered methods to weaponize the characteristic in follow.
Crypto market maker Wintermute has warned that the usual’s implementation is being exploited at scale. Its June evaluation confirmed that greater than 90% of EIP-7702 delegations have been linked to malicious contracts.
The agency identified that many of those contracts are easy copy-paste scripts that scan for susceptible wallets and drain their holdings mechanically.
Contemplating this, Rip-off Sniffer and Xiang urged crypto customers to take additional care earlier than signing pockets requests. They advisable verifying domains, avoiding rushed confirmations, and rejecting signatures that appear unclear or overly broad.
In addition they said that among the purple flags that would come up embody requests for limitless token approvals, contract upgrades below EIP-7702, or transaction simulations that don’t match expectations.
The submit Crypto investor loses $1M in Uniswap scam exploiting Ethereum’s EIP-7702 appeared first on CryptoSlate.
