BlockBeats News, May 26th, According to the blockchain security platform Scam Sniffer, phishing group Inferno Drainer recently used the Ethereum EIP-7702 upgrade feature to carry out a new type of attack, causing a single transaction to result in approximately $150,000 in losses. EIP-7702 is a key feature of the Pectra upgrade, allowing an externally owned account (EOA) to temporarily possess smart contract capabilities during a transaction. The attacker, leveraging an authorized MetaMask wallet, initiated batch token transfer operations.
SlowMist founder Cao Yin pointed out that this event marks an evolution in phishing strategies: attackers no longer directly hijack wallets but instead lure users to trigger MetaMask's "execute" command, silently executing malicious batch approvals in the background to complete asset transfers. (Beincrypto)
免责声明：投资有风险，本文并非投资建议，以上内容不应被视为任何金融产品的购买或出售要约、建议或邀请，作者或其他用户的任何相关讨论、评论或帖子也不应被视为此类内容。本文仅供一般参考，不考虑您的个人投资目标、财务状况或需求。TTM对信息的准确性和完整性不承担任何责任或保证，投资者应自行研究并在投资前寻求专业建议。