Security· ★★★· bearish·

$3.55M in Unclaimed Bridge Funds Moved via EIP-7702

  • —About $3.55 million in unclaimed bridge funds were moved
  • —Transfers used valid EIP-7702 account authorizations
  • —BlockSec could not confirm the owner knowingly approved them
Why it matters: EIP-7702 account delegation opens a new attack surface and raises questions over whether on-chain authorization equals owner consent.
Source: The Defiant