Ethereum Wallet Drained via EIP-7702 Authorization
An attacker exploited a delegation authorization to steal approximately $22,770 in assets from a user wallet.
Updated on Oct. 14, 2026 in Cybersecurity
Live Poll
Do you trust current digital wallet security features to keep your personal assets safe?
An Ethereum wallet was drained of 9.1231 ETH and 1.69271471 TAPEETH tokens after the account owner signed a malicious authorization. Security firm ExVul confirmed the unauthorized transfer occurred via an EIP-7702 delegation.
Why it matters
The incident highlights vulnerabilities in EIP-7702 authorizations, where a signed delegation can grant an attacker full control over a victim's wallet assets. Security experts suggest victims must actively clear or replace such authorizations to regain account security.
The attacker utilized address 0x9208097c007be15e28b20e94e66870a3f9f820bc to invoke the PodMining.claim() function. The malicious delegation, linked to address 0x0366b55f948a688888ca6e029ad0831f6ec260d1, remained active at Ethereum block 26,188,153.
The players
ExVul
ExVul is a cybersecurity firm that tracks and reports on blockchain vulnerabilities and digital asset thefts.
The details
The attacker executed a transaction containing an EIP-7702 authorization that operated under the victim's account context, bypassing traditional transaction hurdles. ExVul reported that the operation did not involve AMM manipulation or flash loans to complete the theft.
Timeline
October 14, 2026: ExVul reported the wallet attack.
The Tech Race
This incident reflects the growing security challenges accompanying the EIP-7702 delegation standard, which aims to improve wallet UX but introduces new vectors for malicious actors. It marks a shift from traditional private key theft toward more complex authorization-based exploits that bypass standard blockchain security barriers.
Users of EIP-7702-compatible wallets should regularly audit their signed authorizations to ensure no malicious delegates have control over their assets. Failing to clear these permissions can result in the immediate and irreversible loss of stored funds.
The takeaway
Blockchain users should be extremely cautious when signing any authorization that grants third-party access to their account context. Always verify the destination of delegation requests to avoid granting control to malicious contract addresses.
Further reading
For more information on current blockchain security trends and wallet safety, visit the Cybersecurity section.
Live Poll
Do you trust current digital wallet security features to keep your personal assets safe?
