Phishing Risks Rise with EIP-7702 Wallet Delegation Feature
Ethereum's wallet delegation feature, EIP-7702, is facing renewed scrutiny after security research linked a significant share of analyzed authorization transactions to attacker-controlled contracts.
The research found that 63% of EIP-7702 authorization transactions in the analyzed sample were connected to malicious contracts, resulting in more than $2.3 million in confirmed thefts.
This is not necessarily a protocol bug, but rather a concern about how wallet delegation can expand the attack surface when users are tricked into signing malicious authorizations.