EIP-7702 Exploited as Coin Theft Surges
Ethereum’s EIP-7702 mechanism heavily exploited by coin theft groups, SlowMist reveals.

- SlowMist’s Cosine reports EIP-7702 exploitation.
- Coin theft sees marked increase post-upgrade.
- User security concerns rise across Ethereum community.

Ethereum’s EIP-7702, introduced in the Pectra upgrade, faces exploitation by coin theft groups, according to blockchain security firm SlowMist.
EIP-7702’s misuse highlights vulnerabilities in Ethereum’s new mechanism, leading to enhanced security discussions, while raising community vigilance.
EIP-7702, introduced during Ethereum’s Pectra upgrade, is now under scrutiny as malicious actors exploit its capabilities. Blockchain security firm SlowMist attributes the exploitation to sophisticated coin theft gangs, indicating major misuse of the feature.
SlowMist’s founder, Cosine, emphasizes that over 97% of EIP-7702 authorizations are for theft contracts. These developments have urgent security implications for wallet users, demanding immediate countermeasures.
The misuse of EIP-7702 affects trust in Ethereum’s ecosystem. Many users express deep concerns over rising theft incidents tied to the new mechanism, while SlowMist continues its investigation into these activities.
Key financial impacts are observed as Ethereum (ETH) and ERC-20 tokens held in compromised wallets are targeted. The situation underscores the need for robust wallet security and improved user interfaces.
Community and developer discourse highlights EIP-7702’s risks. Discussions in forums stress the urgency for better transaction transparency and more intuitive user interfaces to mitigate exploit actions.
Potential outcomes may include increased regulatory scrutiny and technological enhancements aimed at improving security protocols. Historical trends suggest wallet security could evolve to meet these challenges, backed by community efforts.
“The EIP-7702 new mechanism is actually used by the highest level coin stealing gang (not phishing gang), which facilitates the automatic transfer of relevant funds from wallet addresses that leak private keys/mnemonics… More than 97% of EIP-7702 authorizations are authorized to such coin stealing contracts.” – Cosine Lv, Founder, SlowMist
More From Crypto News
Bitcoin Tests $80K as $550M Crypto Liquidations Hit
Bitcoin is testing the $80,000 support level as reports of roughly $550 million in crypto liquidations circulate across market data platforms. Whether BTC can h...
Electrum 4.8.3 Fixes Flaw After Bitcoin Theft
Electrum, one of Bitcoin’s oldest and most widely used software wallets, has released version 4. 8.
Zcash ETFs Draw Millions as Bitcoin Falls
Zcash exchange-traded fund products are reportedly drawing fresh capital at a time when Bitcoin is under selling pressure, with inflows described as the largest...
XRP ETF Investors Put In $1.8B, Holdings Now Worth $1.48B
XRP ETF investors have committed approximately $1. 8 billion in capital, but the aggregate holdings value of those products now sits near $1.
X100 Exploit Proceeds Split Into Four 400-ETH Wallets
X100 exploit proceeds have reportedly been divided into four equal destination wallets, each holding 400 ETH, bringing the observed total distributed across the...
Bitcoin Refuses to Break: @jvisserlabs on Market Resilience
Bitcoin is holding where many expected it to crack. Crypto analyst @jvisserlabs flagged the pattern on X, pointing out that Bitcoin’s repeated refusal to break...