Ethereum users will receive alerts about a new attack that could drain their wallets. Wintermute has developed the "CrimeEnjoyor" code to insert warnings into malicious contracts, emphasizing that this contract "is used by bad actors to automatically sweep all ETH to" and advising "DO NOT SEND ANY ETH."
These malicious contracts exploit the EIP-7702 feature in the Pectra upgrade, allowing users to delegate wallet control to smart contracts. Wintermute reported that over 97% of EIP-7702 delegations were granted to multiple contracts using similar code.
EIP-7702 is optional and not required for basic transactions. A user lost 146,550 USD due to signing malicious transactions. The Pectra upgrade also introduced EIP-725 and EIP-7691 to improve scalability and reduce transaction fees.
The content is for reference only, not a solicitation or offer. No investment, tax, or legal advice provided. See Disclaimer for more risks disclosure.
‘CrimeEnjoyor’ of Wintermute will mark the contracts that deplete Ethereum wallets.
Ethereum users will receive alerts about a new attack that could drain their wallets. Wintermute has developed the "CrimeEnjoyor" code to insert warnings into malicious contracts, emphasizing that this contract "is used by bad actors to automatically sweep all ETH to" and advising "DO NOT SEND ANY ETH."
These malicious contracts exploit the EIP-7702 feature in the Pectra upgrade, allowing users to delegate wallet control to smart contracts. Wintermute reported that over 97% of EIP-7702 delegations were granted to multiple contracts using similar code.
EIP-7702 is optional and not required for basic transactions. A user lost 146,550 USD due to signing malicious transactions. The Pectra upgrade also introduced EIP-725 and EIP-7691 to improve scalability and reduce transaction fees.