@0xdavide

Yesterday, my main wallet, which I use for airdrops and DeFi farming, was drained. No recent approvals, nor shady sites. Over 200 transfers between assets and NFTs were made. I don't understand what happened. Approvals were likely on old DeFi sites, although on Revoke Cash, there were no approvals for any valuable tokens, except those deprecated or no longer present in the wallet. It could also be a new type of attack that exploits Permit/Permit2 signatures. A few other users were also affected yesterday. I believe that DeFi, in addition to AI, has become enormously insecure since Ethereum introduced EIP7702 Delegations to wallets (EVM). Smart accounts are a disaster and increase the attack surface. Anything that should improve the user experience increases the attack surface because it adds complexity.

2 replies

0 recast

6 reactions