$ETH Ethereum recently underwent a network upgrade with the Pectra fork, which added new features, improvements, and, of course, vulnerabilities. But here's the problem — less than an hour after the changes, users began to raise alarms about a new threat: transaction approvals.

One user on Telegram immediately wrote:

"Be careful what you sign… One signed message is enough to take all your tokens." Another confirmed, saying:

"I signed a message — and that's it, you've lost everything!" At first, this sounded like simple panic, but soon it became clear that it was not an exaggeration.

The Pectra update introduced EIP-3074 into the Ethereum system, which included new operation codes — AUTH and AUTHCALL. These codes allow private key holders to delegate their authority to smart contracts. It sounds like a step towards improving account abstraction, but it's not all rosy. Critics point out that it opens up new vulnerabilities — hackers can take all assets from a wallet if a user accidentally delegates control of their key.