Who Swept My ETH? Uncovering EIP-7702-Based Ether Redirection Attacks on Ethereum

Reported by arXiv cs.CR (Ziwei Li, Tianwei Chen, Jiajing Wu, Zigui Jiang, Yuhong Nan, Yaobo Huang, Bowen Song, Zibin Zheng)

Summary by Cyber Security News2 Nov 2026, 06:00 CET

About this summary. This is a short excerpt from the description that arXiv cs.CR published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://arxiv.org/abs/2610.41153

arXiv:2610.41153v1 Announce Type: new Abstract: EIP-7702 introduces a new transaction type that allows Externally Owned Accounts (EOAs) on major EVM-compatible chains to delegate execution to arbitrary contract codes temporarily. While enhancing functionality, this mechanism facilitates a novel threat: the \underline{E}IP-7702-Based \underline{E}ther \underline{R}edirection \underline{A}ttack (EERA).

Read the full article at arXiv cs.CR →

Source attribution: headline and facts are from arXiv cs.CR (arxiv.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency

Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

NIKKE PC launcher compromise put players’ passwords and personal files at risk

CVE-2026-103866: Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling

CVE-2026-103863: Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths