Altcoins News

Story: Ethereum EIP-7702 Upgrade Triggers $2.5M in Phishing Losses

By Maheen Hernandez

1 / 15

How EIP-7702 Works — and How It’s Being Exploited. EIP-7702 enables EOAs to sign cryptographic approvals that delegate execution rights to smart…

2 / 15

Technical Vulnerabilities Beyond Phishing. The challenges are not limited to phishing attempts.

3 / 15

Institutional Exposure to New Threats. For institutional investors, the threat landscape has changed significantly.

4 / 15

Industry Response: Tools and Defenses. The Ethereum ecosystem has begun rolling out countermeasures.

5 / 15

Broader Context: Regulation and Long-Term Risks. The Ethereum Foundation has started a security initiative worth over $1 trillion in pledged value…

6 / 15

Conclusion. Ethereum’s EIP-7702 marks a significant milestone in the blockchain’s technical evolution,…

7 / 15

Ethereum’s latest upgrade, known as the Pectra hard fork, was designed to improve user experience and unlock more efficient transaction features.

8 / 15

In theory, the upgrade expands what everyday users and institutions can do on the Ethereum network.

9 / 15

Data from blockchain security analysts shows that in August 2025 alone, over $2.5 million in digital assets were stolen through these new methods.

10 / 15

The same mechanism, however, provides an opportunity for malicious actors. Once a user signs a delegation to a contract controlled by attackers, that contract can perform…

11 / 15

Security firm Wintermute reports that more than 90% of observed delegations tied to EIP-7702 since its rollout are connected to malicious activity.

12 / 15

One victim lost $1.54 million after approving what appeared to be a routine token swap on Uniswap.

13 / 15

The challenges are not limited to phishing attempts. Analysts point to several structural risks introduced by the delegation model:

14 / 15

Storage collisions — conflicts in contract storage layouts that create unexpected vulnerabilities.

15 / 15

Nonce instability — inconsistencies in transaction ordering that make accounts harder to secure.

The Currency Analytics

Want the full story?