BlockBeats News, May 26th, According to the blockchain security platform Scam Sniffer, phishing group Inferno Drainer recently used the Ethereum EIP-7702 upgrade feature to carry out a new type of attack, causing a single transaction to result in approximately $150,000 in losses. EIP-7702 is a key feature of the Pectra upgrade, allowing an externally owned account (EOA) to temporarily possess smart contract capabilities during a transaction. The attacker, leveraging an authorized MetaMask wallet, initiated batch token transfer operations.
SlowMist founder Cao Yin pointed out that this event marks an evolution in phishing strategies: attackers no longer directly hijack wallets but instead lure users to trigger MetaMask's "execute" command, silently executing malicious batch approvals in the background to complete asset transfers. (Beincrypto)
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.