EIP-7702 enables new Ether redirection attacks on Ethereum
Original title: Who Swept My ETH? Uncovering EIP-7702-Based Ether Redirection Attacks on Ethereum
EERA attacks redirect ETH to malicious sweeper contracts, with 70% of delegations being malicious and many victims failing to revoke them.
EIP-7702 allows EOAs to delegate execution temporarily, facilitating EERA where malicious contracts redirect incoming ETH transfers. Analysis of mainnet transactions after EIP-7702 introduction identified 4,668,209 malicious delegations, 20,443 attack transactions and 508 sweeper contracts. Approximately 70% of delegations point toward ETH sweeper contracts and over 600,000 accounts failed to revoke or update malicious delegations promptly.
- 4,668,209 malicious delegations and 508 ETH sweeper contracts identified
- 20,443 attack transactions observed
- 70% of delegations point to ETH sweeper contracts
- Over 600,000 accounts remain vulnerable
- SweeperHunter framework detects attacks via transaction analysis
From the original article
1 min read at arxiv.orgEIP-7702 introduces a new transaction type that allows Externally Owned Accounts (EOAs) on major EVM-compatible chains to delegate execution to arbitrary contract codes temporarily. While enhancing functionality, this mechanism facilitates a novel threat: the \underline{E}IP-7702-Based \underline{E}ther \underline{R}edirection \underline{A}ttack (EERA).
By Ziwei Li · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.