EIP7702
15,544 visningar
11 diskuterar
Rekommenderas
Senaste
⚠️ Ethereum’s Pectra Upgrade Sparks Security Concerns
📢 Security experts are sounding the alarm over a critical loophole in the EIP-7702 feature of Ethereum’s upcoming Pectra upgrade — potentially allowing exploiters to drain $ETH from wallets.
🌐 As innovation accelerates, so do the risks. This serves as a sharp reminder: Security must scale with progress.
#Ethereum #Pectra #EIP7702 #CryptoSecurity #Blockchain
📢 Security experts are sounding the alarm over a critical loophole in the EIP-7702 feature of Ethereum’s upcoming Pectra upgrade — potentially allowing exploiters to drain $ETH from wallets.
🌐 As innovation accelerates, so do the risks. This serves as a sharp reminder: Security must scale with progress.
#Ethereum #Pectra #EIP7702 #CryptoSecurity #Blockchain
New Feature Introduced in This Altcoin Poses Risk of Asset Theft: Caution Advised
Wintermute, a well-known trading firm in the cryptocurrency markets, has issued an important security warning regarding Ethereum’s recent “Pectra” hard fork.
#EIP7702
According to the company, the feature called EIP-7702, which was introduced as part of the update, is mainly abused by malicious people and user wallets are at risk.
EIP-7702 introduces an “account abstraction” feature pioneered by Ethereum co-founder Vitalik Buterin #VitalikButerin that allows wallets to temporarily act as smart contracts, allowing users to perform functions such as batching multiple transactions, having gas fees paid by someone else, and social authentication in a single transaction. However, according to data published by Wintermute via Dune Analytics, this ability is being used by malicious attackers to drain wallets.
According to Wintermute’s analysis, more than 80% of EIP-7702 delegations serve attacks called “CrimeEnjoyor,” where a simple and short smart contract is copied and reused across different addresses. This contract automatically transfers assets from wallets with leaked private keys to an address controlled by the attacker.
“The CrimeEnjoyor contract is short, simple, and widely used,” Wintermute said. “This copied bytecode now makes up the majority of all EIP-7702 delegations. It’s both ironic and dark.”
Blockchain security firm Scam Sniffer also recently announced that it had detected a malicious transaction linked to a long-known scam service called Inferno Drainer, which caused a loss of approximately $150,000. Meanwhile, another security firm, SlowMist, in its analysis of EIP-7702’s vulnerabilities, emphasized that wallet service providers should support such transactions and that it is important for users to clearly indicate the destination addresses in the contracts they sign.
Wintermute, a well-known trading firm in the cryptocurrency markets, has issued an important security warning regarding Ethereum’s recent “Pectra” hard fork.
#EIP7702
According to the company, the feature called EIP-7702, which was introduced as part of the update, is mainly abused by malicious people and user wallets are at risk.
EIP-7702 introduces an “account abstraction” feature pioneered by Ethereum co-founder Vitalik Buterin #VitalikButerin that allows wallets to temporarily act as smart contracts, allowing users to perform functions such as batching multiple transactions, having gas fees paid by someone else, and social authentication in a single transaction. However, according to data published by Wintermute via Dune Analytics, this ability is being used by malicious attackers to drain wallets.
According to Wintermute’s analysis, more than 80% of EIP-7702 delegations serve attacks called “CrimeEnjoyor,” where a simple and short smart contract is copied and reused across different addresses. This contract automatically transfers assets from wallets with leaked private keys to an address controlled by the attacker.
“The CrimeEnjoyor contract is short, simple, and widely used,” Wintermute said. “This copied bytecode now makes up the majority of all EIP-7702 delegations. It’s both ironic and dark.”
Blockchain security firm Scam Sniffer also recently announced that it had detected a malicious transaction linked to a long-known scam service called Inferno Drainer, which caused a loss of approximately $150,000. Meanwhile, another security firm, SlowMist, in its analysis of EIP-7702’s vulnerabilities, emphasized that wallet service providers should support such transactions and that it is important for users to clearly indicate the destination addresses in the contracts they sign.
EIP-7702 ke misuse par Wintermute ka warning
BlockBeats ke mutabiq, blockchain security company Wintermute ne Ethereum ke naye upgrade "Pectra" ke aik feature EIP-7702 ke ghalat istemal ke bare mein warning di hai. Ye feature asal mein user experience ko behtar banane ke liye banaya gaya tha, lekin hackers is ka misuse kar rahe hain.
Wintermute ne bataya ke EIP-7702 ka ziada tar use (80% se bhi zyada) automatic attacks ke liye ho raha hai. Scam Sniffer naam ki ek aur security firm ne recently aik phishing attack detect kiya jisme aik user ka takreeban $150,000 ka nuqsan hua. Is attack mein hacker ne aik contract banaya jiska naam ‘CrimeEnjoyor’ tha, jo automatically un wallets ko khaali kar deta hai jinke private keys leak ho chuki hoti hain.
EIP-7702, jo Ethereum ke founder Vitalik Buterin ne propose kiya tha, ka maqsad ye tha ke wallets ko temporarily smart contract jese features mil jayein. Iska matlab tha ke users aik waqt mein multiple transactions kar saken, gas fee kisi aur se pay karwa saken, biometric ya social verification istemal kar saken, aur har transaction par limit laga saken.
Lekin ab Wintermute ne apne Dune dashboard pe dikhaya ke zyadatar authorizations (permissions) isi feature ke zariye un contracts ko ja rahe hain jo malicious (nuksan pohchane wale) hain. Security expert Taylor Monahan ne bhi kaha ke EIP-7702 ne ab addresses ko khaali karna asaan aur sasta bana diya hai.
Wintermute ne is baat par hairani ka izhar kiya ke aik hi jese (copy paste) codes ka ziada tar authorizations mein istemal ho raha hai – jo is feature ka misuse dikhata hai.
BlockBeats ki pehle ki report ke mutabiq, SlowMist ke founder Yu Jian ne bhi kaha ke is naye mechanism ka sab se ziada faida coin churaane wale log utha rahe hain, phishing attackers nahi. EIP-7702 ka use un wallets se paise nikalne ke liye ho raha hai jinke private keys ya mnemonic phrases leak ho chuke hote hain. Ab tak 97% se zyada authorizations isi tarah ke coin-stealing contracts ko diye ja chuke hain.
Nateeja:
EIP-7702 ka maksad user experience ko improve karna tha, lekin ab ye hackers ke haath mein aik naya tool ban gaya hai. Isliye crypto users ko zyada ehtiyaat aur security steps lena zaroori hai.
#EIP7702 #Ethereum #article
Wintermute ne bataya ke EIP-7702 ka ziada tar use (80% se bhi zyada) automatic attacks ke liye ho raha hai. Scam Sniffer naam ki ek aur security firm ne recently aik phishing attack detect kiya jisme aik user ka takreeban $150,000 ka nuqsan hua. Is attack mein hacker ne aik contract banaya jiska naam ‘CrimeEnjoyor’ tha, jo automatically un wallets ko khaali kar deta hai jinke private keys leak ho chuki hoti hain.
EIP-7702, jo Ethereum ke founder Vitalik Buterin ne propose kiya tha, ka maqsad ye tha ke wallets ko temporarily smart contract jese features mil jayein. Iska matlab tha ke users aik waqt mein multiple transactions kar saken, gas fee kisi aur se pay karwa saken, biometric ya social verification istemal kar saken, aur har transaction par limit laga saken.
Lekin ab Wintermute ne apne Dune dashboard pe dikhaya ke zyadatar authorizations (permissions) isi feature ke zariye un contracts ko ja rahe hain jo malicious (nuksan pohchane wale) hain. Security expert Taylor Monahan ne bhi kaha ke EIP-7702 ne ab addresses ko khaali karna asaan aur sasta bana diya hai.
Wintermute ne is baat par hairani ka izhar kiya ke aik hi jese (copy paste) codes ka ziada tar authorizations mein istemal ho raha hai – jo is feature ka misuse dikhata hai.
BlockBeats ki pehle ki report ke mutabiq, SlowMist ke founder Yu Jian ne bhi kaha ke is naye mechanism ka sab se ziada faida coin churaane wale log utha rahe hain, phishing attackers nahi. EIP-7702 ka use un wallets se paise nikalne ke liye ho raha hai jinke private keys ya mnemonic phrases leak ho chuke hote hain. Ab tak 97% se zyada authorizations isi tarah ke coin-stealing contracts ko diye ja chuke hain.
Nateeja:
EIP-7702 ka maksad user experience ko improve karna tha, lekin ab ye hackers ke haath mein aik naya tool ban gaya hai. Isliye crypto users ko zyada ehtiyaat aur security steps lena zaroori hai.
#EIP7702 #Ethereum #article
Does Ethereum simplify life... and open the door to hackers?
Listen, my friend, there's a story that happened around Ethereum — you know, the very blockchain system that runs on a bunch of smart contracts and NFTs. They recently rolled out an update called Pectra, and it included one cool, seemingly cool feature — EIP-7702. This improvement allows a regular wallet to temporarily behave like a smart contract. In theory, it should have made life much easier.: For example, you can combine several actions into one transaction, pay the commission in another way, or set spending limits — isn't that convenient?
There's just one problem: hackers have started actively using it.
According to the cryptotrading company Wintermute, more than 80% of all EIP-7702 delegation leads to copies of the same malicious contract. They called him "CrimeEnjoyer" — he simply and effectively cleans wallets with leaked keys, and all the contents go to the hacker's address. And there are plenty of such copies of the contract.
Another company, Scam Sniffer, found a case where a person lost almost $150,000 through a batch transaction related to the Inferno Drainer service — this is such a fraudulent "custom-made" tool. And SlowMist, which deals with blockchain security, urges wallet developers to be more careful and show the user where and why he is delegating authority.
Now, attention: the problem is not so much in the EIP-7702 itself. According to security expert Taylor Monaghan, the main risk is the leakage of private keys. That is, if someone gets your private key, that's it, your funds are at risk. And the new feature just makes attacks more effective.
So, it turns out that Ethereum seems to make technology more accessible, but at the same time it substitutes its own users. The functions are becoming more powerful, and people's protection remains weak.
Well, I have a question for you: do you think it's worth updating wallets and trying new chips at all, if there is such a lottery with security?
$ETH #ETH #Ethereum #CryptoNewss #EIP7702 #pectra
There's just one problem: hackers have started actively using it.
According to the cryptotrading company Wintermute, more than 80% of all EIP-7702 delegation leads to copies of the same malicious contract. They called him "CrimeEnjoyer" — he simply and effectively cleans wallets with leaked keys, and all the contents go to the hacker's address. And there are plenty of such copies of the contract.
Another company, Scam Sniffer, found a case where a person lost almost $150,000 through a batch transaction related to the Inferno Drainer service — this is such a fraudulent "custom-made" tool. And SlowMist, which deals with blockchain security, urges wallet developers to be more careful and show the user where and why he is delegating authority.
Now, attention: the problem is not so much in the EIP-7702 itself. According to security expert Taylor Monaghan, the main risk is the leakage of private keys. That is, if someone gets your private key, that's it, your funds are at risk. And the new feature just makes attacks more effective.
So, it turns out that Ethereum seems to make technology more accessible, but at the same time it substitutes its own users. The functions are becoming more powerful, and people's protection remains weak.
Well, I have a question for you: do you think it's worth updating wallets and trying new chips at all, if there is such a lottery with security?
$ETH #ETH #Ethereum #CryptoNewss #EIP7702 #pectra
BiyaPay不冻卡出金:
以太坊趋势比过山车刺激
以太坊 Pectra 升级引发安全担忧，加密货币盗窃团伙滥用新协议
随着以太坊 Pectra 升级的推出，网络犯罪分子开始滥用其中的新协议 EIP-7702，从带有被盗私钥的钱包中窃取加密货币。这一功能本意是提高钱包的可用性，却意外成为了犯罪分子的通过恶意软件来操纵受害者钱包的新途径。
EIP-7702 允许钱包像智能合约一样运作，可以自动转移被盗资金。Wintermute 的分析师发现，攻击者利用了 97% 的 EIP-7702 钱包委托来部署恶意合约，从用户那里榨取资金。这些合约会自动将收到的任何 ETH 转发到攻击者自己的地址，使得资金盗窃变得更加容易和隐蔽。
Safe 首席产品官 Rahul Rumalla 表示，攻击者很有可能是早期采用者之一。通过Wintermute 的分析显示，大多数钱包委托都指向相同的代码库，旨在从受损钱包中“清除” ETH。同时，在调查的近 19 万份委托合约中，超过 10.5 万份与非法活动有关。
另据Base Network 高级数据分析师Koffi指出，上周末有超过一百万个钱包与可疑合约进行了互动。他强调，攻击者并没有使用 EIP-7702 来入侵钱包，而是利用它来简化对已经暴露私钥的钱包的盗窃。
与此同时，区块链安全公司 SlowMist 的创始人 Yu Xian 确认，肇事者是有组织的盗窃团伙，而非典型的网络钓鱼运营商。他表示，EIP-7702 的自动化功能使其对大规模漏洞利用特别有吸引力。
尽管攻击者的业务规模很广，但迄今为止尚未确认盈利。Wintermute 的一位研究人员指出，攻击者已花费约 2.88 ETH 授权了超过 79,000 个地址，但攻击者利用这一漏洞所产生的目标地址，尚未获得实质性收益。
综上，EIP-7702协议被滥用，对以太坊网络的安全性和信誉构成了威胁。为防止类似事件的发生，亟需行业深思以及有效的解决方案。
#以太坊安全 #加密货币盗窃 #协议漏洞 #EIP7702
随着以太坊 Pectra 升级的推出，网络犯罪分子开始滥用其中的新协议 EIP-7702，从带有被盗私钥的钱包中窃取加密货币。这一功能本意是提高钱包的可用性，却意外成为了犯罪分子的通过恶意软件来操纵受害者钱包的新途径。
EIP-7702 允许钱包像智能合约一样运作，可以自动转移被盗资金。Wintermute 的分析师发现，攻击者利用了 97% 的 EIP-7702 钱包委托来部署恶意合约，从用户那里榨取资金。这些合约会自动将收到的任何 ETH 转发到攻击者自己的地址，使得资金盗窃变得更加容易和隐蔽。
Safe 首席产品官 Rahul Rumalla 表示，攻击者很有可能是早期采用者之一。通过Wintermute 的分析显示，大多数钱包委托都指向相同的代码库，旨在从受损钱包中“清除” ETH。同时，在调查的近 19 万份委托合约中，超过 10.5 万份与非法活动有关。
另据Base Network 高级数据分析师Koffi指出，上周末有超过一百万个钱包与可疑合约进行了互动。他强调，攻击者并没有使用 EIP-7702 来入侵钱包，而是利用它来简化对已经暴露私钥的钱包的盗窃。
与此同时，区块链安全公司 SlowMist 的创始人 Yu Xian 确认，肇事者是有组织的盗窃团伙，而非典型的网络钓鱼运营商。他表示，EIP-7702 的自动化功能使其对大规模漏洞利用特别有吸引力。
尽管攻击者的业务规模很广，但迄今为止尚未确认盈利。Wintermute 的一位研究人员指出，攻击者已花费约 2.88 ETH 授权了超过 79,000 个地址，但攻击者利用这一漏洞所产生的目标地址，尚未获得实质性收益。
综上，EIP-7702协议被滥用，对以太坊网络的安全性和信誉构成了威胁。为防止类似事件的发生，亟需行业深思以及有效的解决方案。
#以太坊安全 #加密货币盗窃 #协议漏洞 #EIP7702
Midday News Update #Web3
🍪 $COOKIE surges past 0.35 USDT — possibly fueled by the launch of Cookie Snaps feature.
🏁 James Wynn hints at retiring from futures trading — exits with $25M in total profit, saying “leaving on a win.”
🎣 Inferno Drainer uses EIP-7702 in phishing attack — one victim loses $150K in a single hit.
🗣️ Donald Trump Jr.: Our entry into crypto stems from being “debanked” in the past.
✅ HyperFND’s X account secured after breach — no impact to on-chain systems or other channels.
#COOKIE #JamesWynn #EIP7702
🍪 $COOKIE surges past 0.35 USDT — possibly fueled by the launch of Cookie Snaps feature.
🏁 James Wynn hints at retiring from futures trading — exits with $25M in total profit, saying “leaving on a win.”
🎣 Inferno Drainer uses EIP-7702 in phishing attack — one victim loses $150K in a single hit.
🗣️ Donald Trump Jr.: Our entry into crypto stems from being “debanked” in the past.
✅ HyperFND’s X account secured after breach — no impact to on-chain systems or other channels.
#COOKIE #JamesWynn #EIP7702
Midday News Update #Web3
🍪 $COOKIE surges past 0.35 USDT — possibly fueled by the launch of Cookie Snaps feature.
🏁 James Wynn hints at retiring from futures trading — exits with $25M in total profit, saying “leaving on a win.”
🎣 Inferno Drainer uses EIP-7702 in phishing attack — one victim loses $150K in a single hit.
🗣️ Donald Trump Jr.: Our entry into crypto stems from being “debanked” in the past.
✅ HyperFND’s X account secured after breach — no impact to on-chain systems or other channels.
#COOKIE #JamesWynn #EIP7702
🍪 $COOKIE surges past 0.35 USDT — possibly fueled by the launch of Cookie Snaps feature.
🏁 James Wynn hints at retiring from futures trading — exits with $25M in total profit, saying “leaving on a win.”
🎣 Inferno Drainer uses EIP-7702 in phishing attack — one victim loses $150K in a single hit.
🗣️ Donald Trump Jr.: Our entry into crypto stems from being “debanked” in the past.
✅ HyperFND’s X account secured after breach — no impact to on-chain systems or other channels.
#COOKIE #JamesWynn #EIP7702
💰 #Ethereum успешно активировал обновление #Pectra в тестовой сети #Sepolia .
Это последний этап перед запуском в основной сети, который ожидается в апреле.
Среди ключевых изменений — увеличение лимита стейкинга для валидаторов (EIP-7251) и улучшенная поддержка смарт-контрактов для кошельков (#EIP7702 ).
$ETH
Это последний этап перед запуском в основной сети, который ожидается в апреле.
Среди ключевых изменений — увеличение лимита стейкинга для валидаторов (EIP-7251) и улучшенная поддержка смарт-контрактов для кошельков (#EIP7702 ).
$ETH
#Ethereum #ETH #EIP7702 #Layer2 #质押
🚀 以太坊将于 5 月 7 日迎来 Pectra 升级！
本轮升级聚焦账户抽象、质押机制优化和 L2 扩容，核心改动如下：
🔹 EIP-7702：账户抽象革新
外部拥有账户（EOA）可临时转为合约账户
实现交易批处理、Gas 赞助、多重签名等能力
替代此前 EIP-3074，兼容未来 EIP-4337 路线
🔹 验证者机制优化
EIP-7251：将单个验证者质押上限提升至 2048 ETH，有助于节点去中心化
EIP-7002：允许执行层触发提款，增强提款灵活性
EIP-6110：共识层直接推送验证者存款，移除入网延迟
🔹 L2 扩容升级
EIP-7691：提高 Blob 数据吞吐量，有望降低 L2 手续费成本
📌 总结：
Pectra 是以太坊迈向“全面账户抽象”和“更强数据可用性”的关键一步，为 L2 和验证者提供更强支持，预期将优化用户体验和基础设施性能。
🚀 以太坊将于 5 月 7 日迎来 Pectra 升级！
本轮升级聚焦账户抽象、质押机制优化和 L2 扩容，核心改动如下：
🔹 EIP-7702：账户抽象革新
外部拥有账户（EOA）可临时转为合约账户
实现交易批处理、Gas 赞助、多重签名等能力
替代此前 EIP-3074，兼容未来 EIP-4337 路线
🔹 验证者机制优化
EIP-7251：将单个验证者质押上限提升至 2048 ETH，有助于节点去中心化
EIP-7002：允许执行层触发提款，增强提款灵活性
EIP-6110：共识层直接推送验证者存款，移除入网延迟
🔹 L2 扩容升级
EIP-7691：提高 Blob 数据吞吐量，有望降低 L2 手续费成本
📌 总结：
Pectra 是以太坊迈向“全面账户抽象”和“更强数据可用性”的关键一步，为 L2 和验证者提供更强支持，预期将优化用户体验和基础设施性能。
🚀 Ethereum (ETH) Upgrade on May 7, 2025 Set for Major Leap with Pectra
The Ethereum$ETH
network is gearing up for a transformative update with the Pectra Upgrade, scheduled for May 7, 2025. This update introduces several game-changing features, with a key highlight being the integration of EIP-7702.
🛠️ What’s New in the Pectra Upgrade?
🔄 EIP-7702: A new standard to enhance account abstraction.
🧠 Improved Validator UX: Aimed at simplifying the experience for Ethereum validators.
💠 Blob Count Doubled: Doubling the blob count increases data availability and supports scaling via rollups.
🧪 Zero Active Bugs: Developers report a clean slate in final testing phases, indicating high readiness for deployment.
⚡ AI Analysis:
Ethereum’s historical upgrade patterns show strong correlation with price optimism. The focus on zero active bugs and significant network improvements suggests a potential boost in investor confidence, possibly leading to a positive price breakout post-upgrade.
#Ethereum #ETH #PectraUpgrade #EIP7702 #BlockchainTechnology
network is gearing up for a transformative update with the Pectra Upgrade, scheduled for May 7, 2025. This update introduces several game-changing features, with a key highlight being the integration of EIP-7702.
🛠️ What’s New in the Pectra Upgrade?
🔄 EIP-7702: A new standard to enhance account abstraction.
🧠 Improved Validator UX: Aimed at simplifying the experience for Ethereum validators.
💠 Blob Count Doubled: Doubling the blob count increases data availability and supports scaling via rollups.
🧪 Zero Active Bugs: Developers report a clean slate in final testing phases, indicating high readiness for deployment.
⚡ AI Analysis:
Ethereum’s historical upgrade patterns show strong correlation with price optimism. The focus on zero active bugs and significant network improvements suggests a potential boost in investor confidence, possibly leading to a positive price breakout post-upgrade.
#Ethereum #ETH #PectraUpgrade #EIP7702 #BlockchainTechnology
Is the Crypto Market Topping Out… or Just Gearing Up?
#CryptoMarket #Binance #Bitcoin #Ethereum #Altcoins
Total Market Cap: $3.33T – walking the tightrope at the top.
BTC at $104K, ETH steady, altcoins flashing green – but is the momentum fading… or fueling up?
Top Movers Today:
EOS: +11.7%
AAVE: +8.5%
XRP & Monero: -1% — are they catching their breath?
Key Signals to Watch:
BTC holding strong – bulls aren’t letting go
Resistance? Yes. But sellers can’t crack the code
Short-term dip? Possible.
Long-term trend? Smart money is stacking.
Miners HODLing = Bullish Fuel
Bitcoin miners are done selling.
They’re stacking sats, squeezing supply, and signaling what’s next: a potential rocket launch.
Ethereum in Focus:
Deribit data shows a cautious lean
But with EIP-7702, ETH isn’t sleeping — it’s evolving
Over 11,000 smart account signups just one week post-Pectra upgrade
dApps, wallets, exchanges — all sprinting to integrate
Market cooling off... or heating beneath the surface?
The charts may flicker, but fundamentals are lit.
Trade smarter. Stay ahead. Only on #Binance – the home of the crypto edge.
#BinanceNow #MarketWatch #AltcoinSeason #BitcoinNews #CryptoUpdate #EIP7702 #EthereumInnovation #BinanceHODLerNXPC
#CryptoMarket #Binance #Bitcoin #Ethereum #Altcoins
Total Market Cap: $3.33T – walking the tightrope at the top.
BTC at $104K, ETH steady, altcoins flashing green – but is the momentum fading… or fueling up?
Top Movers Today:
EOS: +11.7%
AAVE: +8.5%
XRP & Monero: -1% — are they catching their breath?
Key Signals to Watch:
BTC holding strong – bulls aren’t letting go
Resistance? Yes. But sellers can’t crack the code
Short-term dip? Possible.
Long-term trend? Smart money is stacking.
Miners HODLing = Bullish Fuel
Bitcoin miners are done selling.
They’re stacking sats, squeezing supply, and signaling what’s next: a potential rocket launch.
Ethereum in Focus:
Deribit data shows a cautious lean
But with EIP-7702, ETH isn’t sleeping — it’s evolving
Over 11,000 smart account signups just one week post-Pectra upgrade
dApps, wallets, exchanges — all sprinting to integrate
Market cooling off... or heating beneath the surface?
The charts may flicker, but fundamentals are lit.
Trade smarter. Stay ahead. Only on #Binance – the home of the crypto edge.
#BinanceNow #MarketWatch #AltcoinSeason #BitcoinNews #CryptoUpdate #EIP7702 #EthereumInnovation #BinanceHODLerNXPC
Logga in för att utforska mer innehåll