Wu said that Shimmer Yuxian stated that a user lost approximately 1 million dollars in tokens and NFTs due to a phishing transaction. The attacker used EIP-7702 to delegate authorization of the user's wallet to the MetaMask Delegator and completed the asset transfer through a contract call to the Uniswap Universal Router. The victim only needed to click on a signature confirmation on the phishing site once for all assets in the wallet to be transferred away.