BlockBeats 消息,8 月 24 日,慢雾创始人余弦转发 ScamSniffer 发布的安全预警表示,今日再度有用户因签署 EIP-7702 网络钓鱼批量交易而损失了约 154 万美元,涉及 ETH、BTC 等多个在以太坊上质押的代币。原理是 EIP-7702 利用,将用户 EOA 地址委托授权给 MetaMask: EIP-7702 Delegator,并通过其合约调用完成后续 Token 转移操作。该钓鱼手段已被主流钓鱼团伙工程化实践,若不慎被诱导交易将损失整个账户资产。提醒用户确认交易前确认网站与链接真实性,防止欺诈。
此前 8 月 22 日,据 ScamSniffer 监测,某用户签署了伪装成 Uniswap 掉期交易的钓鱼批量 EIP-7702 成交申请后,损失了约 100 万美元的代币和 NFT。攻击者通过伪装成 Uniswap 交易界面,诱导用户签署交易,并在交易中嵌入恶意代码或授权。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.