最新报道:According to Bijie.com, SlowMist Yuxian disclosed on the X platform that an investor's entire WLFI investment in a private sale was stolen due to a private key leak. He described this as a typical EIP-7702 phishing attack. First, the private key was leaked. The phishing group (possibly more than one) embedded an EIP-7702 exploit in the wallet address corresponding to the victim's private key. This exploit automatically transfers any remaining tokens, such as WLFI tokens invested in the Lockbox contract, by depositing gas. This front-running strategy works by depositing gas, canceling or replacing the embedded EIP-7702 with their own, and transferring the value tokens. These three actions are bundled together and sent in a single block using flashbots.