Ethereum user loses $22K in EIP-7702 wallet attack
An Ethereum wallet associated with sven.eth has reportedly lost 9.1231 ETH, valued at approximately $22,770, and 1.69271471 TAPEETH tokens after an attacker used a malicious EIP-7702 authorization to gain control of the account. Blockchain security firm ExVul reported the incident on October 14, identifying an attacker-sponsored transaction that activated malicious code previously authorized by the wallet owner. The firm attributed the theft to an unsafe delegation, explaining that the attacker drained the wallet without exploiting the underlying DeFi protocol. The reported incident involved the wallet linked to sven.eth and an attacker-controlled address beginning with 0x9208. According to ExVul‘s investigation, the authorization allowed code installed through Ethereum’s EIP-7702 mechanism to operate with the wallets permissions. Ethereum EIP-7702 attack drains ETH and TAPEETH The reported theft involved 9.1231 ETH and 1.69271471 TAPEETH, with the ETH portion valued at approximately $22,770 when ExVul published its findings. The security firm did not provide a separate dollar valuation for the TAPEETH tokens. ExVul identified the transaction hash as 0x36e0d1491c14e3d8e50bc70d73675b89d2d4712814d16f808f957c84fde820ee, linking the activity to a sponsored type-4 Ethereum transaction. Such transactions support EIP-7702 authorizations, which allow ordinary wallet addresses to execute smart contract code. The investigation attributed the attack to 0x9208097c007be15e28b20e94e66870a3f9f820bc. The victims wallet was identified as 0xd8ba9e5886b7000bace2c9dbdd0be98ac77d4a28, while the malicious delegation









