EIP-7702 Wallet Delegation Faces Scrutiny After Phishing Research

Ethereum’s EIP-7702 wallet delegation feature is facing renewed scrutiny after security research presented at the USENIX Security Symposium linked a large share of analyzed authorization transactions to attacker-controlled contracts. The research found that 63% of EIP-7702 authorization transactions in the analyzed sample were connected to malicious contracts, with automated wallet-draining activity contributing to more than $2.3 million in confirmed thefts. That sounds alarming, but the framing matters. This is not the same as saying EIP-7702 has an inherent protocol bug. The concern is that wallet delegation can expand the attack surface when users are tricked into signing malicious authorizations. In other words, the danger sits at the intersection of protocol flexibility, wallet UX, user behavior, and phishing infrastructure. TL;DR Security research linked 63% of analyzed EIP-7702 authorization transactions to attacker-controlled contracts. The research identified more than $2.3 million in confirmed thefts. The issue is malicious delegation and wallet attack surface, not necessarily a core Ethereum protocol bug. What EIP-7702 Changes EIP-7702 is part of Ethereum’s broader accou...