最新报道:EIP-7702, part of Ethereum's Pectra hardfork, enables EOAs to temporarily act as smart contract wallets, introducing features like gas sponsorship but also enabling phishing attacks. Groups like #InfernoDrainer have exploited it to drain funds, with one incident stealing $146,000 via a single transaction. The mechanism allows attackers to deploy malicious delegate contracts after compromising private keys, hijacking transactions. Institutional exposure is significant, as seen with WLFI facing potential $2.5 million losses. Wallet providers like MetaMask are implementing whitelists, while experts recommend multi-sig wallets and rigorous contract verification to mitigate risks.