According to Wu, GoPlus Security warned that a malicious EIP-7702 authorization address (0x930f...0d0b) was found to automatically redirect the ETH transferred by users to a fraudulent wallet (0x0000...bad). The address disguised as a legitimate Delegator, inducing users to authorize when enabling smart accounts, thereby stealing funds. Currently, there are more than 10,000 addresses using EIP-7702 smart accounts. Official reminder to users: Be sure to only authorize through the official wallet application, and do not click on external links or emails to perform "upgrade" operations.