Dec 13, 2025
0 new drains, 1 update.
Updated
-
Low✕Still active
USENIX study: over 63% of EIP-7702 authorization transactions tied to malicious contracts
A peer-reviewed study presented at USENIX Security '26 (August 2026) found 924 malicious contract accounts across seven chains that support EIP-7702, with more than $2.3 million in losses and over 10 million users exposed. The authors say over 63% of authorization transactions in their data were linked to attacks on regular wallets, and nearly half of the most-authorized contracts were attacker-controlled. The study window ends in mid-2025, so it measures early abuse, not today's rate. It confirms that 7702 delegation is a major phishing and key-theft sweep vector.
Users of EIP-7702 smart accounts on Ethereum and other EVM chains·Multiple EVM chains·Since Aug 1, 2026·