The post Ethereum phishing scams – $12M lost in August as EIP-7702 exploits surge! appeared on BitcoinEthereumNews.com. Key Takeaways Phishing scams drained over $12M from 15,000+ wallets in August 2025, largely exploiting Ethereum’s EIP-7702 standard. Experts warn that even major projects like Trump’s WLFI token are being targeted. Phishing scams in the crypto sector surged to alarming levels in August 2025, stripping investors of more than $12 million across 15,000+ wallets. According to blockchain security firm Scam Sniffer, the losses marked a 72% jump from July – With the number of victims climbing by 67% month-over-month. Phishing attacks go beyond heights Phishing attacks in August showed how quickly scammers have adapted to Ethereum [ETH]’s latest innovations. In fact, Scam Sniffer revealed that three whale wallets accounted for nearly 46% of the $12 million in losses that month, with one wallet alone losing $3.08 million. The firm identified Ethereum’s new EIP-7702 standard as the primary tool scammers exploited in these schemes. For those unaware, Ethereum introduced EIP-7702 to improve wallet functionality, enabling externally owned accounts (EOAs) to temporarily operate like smart contract wallets. The upgrade added convenient features such as batching transactions, setting spending caps, integrating passkeys, and recovering wallets without changing addresses. However, attackers soon weaponized these same features, using them to accelerate thefts and trick users into signing malicious approvals. Details of the attack Wintermute’s Dune Analytics dashboard showed that over 80% of delegate contracts tied to EIP-7702 have displayed malicious behavior, compromising more than 450,000 wallet addresses since the standard’s rollout. Security experts also believe that most users remain dangerously unaware of these risks. Yu Xian, founder of blockchain security firm SlowMist, also emphasized that organized criminal groups have eagerly exploited EIP-7702, extending the attacks across Ethereum Virtual Machine (EVM) ecosystems. Hence, to counter these threats, Scam Sniffer is urgingnvestors to exercise greater caution when interacting with wallet prompts. The firm recommended verifying domains, avoiding… The post Ethereum phishing scams – $12M lost in August as EIP-7702 exploits surge! appeared on BitcoinEthereumNews.com. Key Takeaways Phishing scams drained over $12M from 15,000+ wallets in August 2025, largely exploiting Ethereum’s EIP-7702 standard. Experts warn that even major projects like Trump’s WLFI token are being targeted. Phishing scams in the crypto sector surged to alarming levels in August 2025, stripping investors of more than $12 million across 15,000+ wallets. According to blockchain security firm Scam Sniffer, the losses marked a 72% jump from July – With the number of victims climbing by 67% month-over-month. Phishing attacks go beyond heights Phishing attacks in August showed how quickly scammers have adapted to Ethereum [ETH]’s latest innovations. In fact, Scam Sniffer revealed that three whale wallets accounted for nearly 46% of the $12 million in losses that month, with one wallet alone losing $3.08 million. The firm identified Ethereum’s new EIP-7702 standard as the primary tool scammers exploited in these schemes. For those unaware, Ethereum introduced EIP-7702 to improve wallet functionality, enabling externally owned accounts (EOAs) to temporarily operate like smart contract wallets. The upgrade added convenient features such as batching transactions, setting spending caps, integrating passkeys, and recovering wallets without changing addresses. However, attackers soon weaponized these same features, using them to accelerate thefts and trick users into signing malicious approvals. Details of the attack Wintermute’s Dune Analytics dashboard showed that over 80% of delegate contracts tied to EIP-7702 have displayed malicious behavior, compromising more than 450,000 wallet addresses since the standard’s rollout. Security experts also believe that most users remain dangerously unaware of these risks. Yu Xian, founder of blockchain security firm SlowMist, also emphasized that organized criminal groups have eagerly exploited EIP-7702, extending the attacks across Ethereum Virtual Machine (EVM) ecosystems. Hence, to counter these threats, Scam Sniffer is urgingnvestors to exercise greater caution when interacting with wallet prompts. The firm recommended verifying domains, avoiding…

Ethereum phishing scams – $12M lost in August as EIP-7702 exploits surge!

Key Takeaways

Phishing scams drained over $12M from 15,000+ wallets in August 2025, largely exploiting Ethereum’s EIP-7702 standard. Experts warn that even major projects like Trump’s WLFI token are being targeted.


Phishing scams in the crypto sector surged to alarming levels in August 2025, stripping investors of more than $12 million across 15,000+ wallets.

According to blockchain security firm Scam Sniffer, the losses marked a 72% jump from July – With the number of victims climbing by 67% month-over-month.

Phishing attacks go beyond heights

Phishing attacks in August showed how quickly scammers have adapted to Ethereum [ETH]’s latest innovations.

In fact, Scam Sniffer revealed that three whale wallets accounted for nearly 46% of the $12 million in losses that month, with one wallet alone losing $3.08 million. The firm identified Ethereum’s new EIP-7702 standard as the primary tool scammers exploited in these schemes.

For those unaware, Ethereum introduced EIP-7702 to improve wallet functionality, enabling externally owned accounts (EOAs) to temporarily operate like smart contract wallets. The upgrade added convenient features such as batching transactions, setting spending caps, integrating passkeys, and recovering wallets without changing addresses.

However, attackers soon weaponized these same features, using them to accelerate thefts and trick users into signing malicious approvals.

Details of the attack

Wintermute’s Dune Analytics dashboard showed that over 80% of delegate contracts tied to EIP-7702 have displayed malicious behavior, compromising more than 450,000 wallet addresses since the standard’s rollout.

Security experts also believe that most users remain dangerously unaware of these risks.

Yu Xian, founder of blockchain security firm SlowMist, also emphasized that organized criminal groups have eagerly exploited EIP-7702, extending the attacks across Ethereum Virtual Machine (EVM) ecosystems.

Hence, to counter these threats, Scam Sniffer is urgingnvestors to exercise greater caution when interacting with wallet prompts.

The firm recommended verifying domains, avoiding rushed approvals, and rejecting signatures that grant unlimited or overly broad permissions.

As suspicious prompts tied to contract upgrades and mismatched transaction simulations continue to spread, Ethereum users should stay vigilant. Especially since even breakthrough features can double as attack vectors in the wrong hands.

Next: Dogecoin price prediction – Whales’ buying spree, a new breakout, and odds of hitting $0.25

Source: https://ambcrypto.com/ethereum-phishing-scams-12m-lost-in-august-as-eip-7702-exploits-surge/

Piyasa Fırsatı
OFFICIAL TRUMP Logosu
OFFICIAL TRUMP Fiyatı(TRUMP)
$5.121
$5.121$5.121
+0.13%
USD
OFFICIAL TRUMP (TRUMP) Canlı Fiyat Grafiği
Sorumluluk Reddi: Bu sitede yeniden yayınlanan makaleler, halka açık platformlardan alınmıştır ve yalnızca bilgilendirme amaçlıdır. MEXC'nin görüşlerini yansıtmayabilir. Tüm hakları telif sahiplerine aittir. Herhangi bir içeriğin üçüncü taraf haklarını ihlal ettiğini düşünüyorsanız, kaldırılması için lütfen [email protected] ile iletişime geçin. MEXC, içeriğin doğruluğu, eksiksizliği veya güncelliği konusunda hiçbir garanti vermez ve sağlanan bilgilere dayalı olarak alınan herhangi bir eylemden sorumlu değildir. İçerik, finansal, yasal veya diğer profesyonel tavsiye niteliğinde değildir ve MEXC tarafından bir tavsiye veya onay olarak değerlendirilmemelidir.

Ayrıca Şunları da Beğenebilirsiniz

Building a DEXScreener Clone: A Step-by-Step Guide

Building a DEXScreener Clone: A Step-by-Step Guide

DEX Screener is used by crypto traders who need access to on-chain data like trading volumes, liquidity, and token prices. This information allows them to analyze trends, monitor new listings, and make informed investment decisions. In this tutorial, I will build a DEXScreener clone from scratch, covering everything from the initial design to a functional app. We will use Streamlit, a Python framework for building full-stack apps.
Paylaş
Hackernoon2025/09/18 15:05
Which DOGE? Musk's Cryptic Post Explodes Confusion

Which DOGE? Musk's Cryptic Post Explodes Confusion

A viral chart documenting a sharp decline in U.S. federal employment during President Trump's second term has sparked unexpected confusion in cryptocurrency markets
Paylaş
Coinstats2025/12/20 01:13
Google's AP2 protocol has been released. Does encrypted AI still have a chance?

Google's AP2 protocol has been released. Does encrypted AI still have a chance?

Following the MCP and A2A protocols, the AI Agent market has seen another blockbuster arrival: the Agent Payments Protocol (AP2), developed by Google. This will clearly further enhance AI Agents' autonomous multi-tasking capabilities, but the unfortunate reality is that it has little to do with web3AI. Let's take a closer look: What problem does AP2 solve? Simply put, the MCP protocol is like a universal hook, enabling AI agents to connect to various external tools and data sources; A2A is a team collaboration communication protocol that allows multiple AI agents to cooperate with each other to complete complex tasks; AP2 completes the last piece of the puzzle - payment capability. In other words, MCP opens up connectivity, A2A promotes collaboration efficiency, and AP2 achieves value exchange. The arrival of AP2 truly injects "soul" into the autonomous collaboration and task execution of Multi-Agents. Imagine AI Agents connecting Qunar, Meituan, and Didi to complete the booking of flights, hotels, and car rentals, but then getting stuck at the point of "self-payment." What's the point of all that multitasking? So, remember this: AP2 is an extension of MCP+A2A, solving the last mile problem of AI Agent automated execution. What are the technical highlights of AP2? The core innovation of AP2 is the Mandates mechanism, which is divided into real-time authorization mode and delegated authorization mode. Real-time authorization is easy to understand. The AI Agent finds the product and shows it to you. The operation can only be performed after the user signs. Delegated authorization requires the user to set rules in advance, such as only buying the iPhone 17 when the price drops to 5,000. The AI Agent monitors the trigger conditions and executes automatically. The implementation logic is cryptographically signed using Verifiable Credentials (VCs). Users can set complex commission conditions, including price ranges, time limits, and payment method priorities, forming a tamper-proof digital contract. Once signed, the AI Agent executes according to the conditions, with VCs ensuring auditability and security at every step. Of particular note is the "A2A x402" extension, a technical component developed by Google specifically for crypto payments, developed in collaboration with Coinbase and the Ethereum Foundation. This extension enables AI Agents to seamlessly process stablecoins, ETH, and other blockchain assets, supporting native payment scenarios within the Web3 ecosystem. What kind of imagination space can AP2 bring? After analyzing the technical principles, do you think that's it? Yes, in fact, the AP2 is boring when it is disassembled alone. Its real charm lies in connecting and opening up the "MCP+A2A+AP2" technology stack, completely opening up the complete link of AI Agent's autonomous analysis+execution+payment. From now on, AI Agents can open up many application scenarios. For example, AI Agents for stock investment and financial management can help us monitor the market 24/7 and conduct independent transactions. Enterprise procurement AI Agents can automatically replenish and renew without human intervention. AP2's complementary payment capabilities will further expand the penetration of the Agent-to-Agent economy into more scenarios. Google obviously understands that after the technical framework is established, the ecological implementation must be relied upon, so it has brought in more than 60 partners to develop it, almost covering the entire payment and business ecosystem. Interestingly, it also involves major Crypto players such as Ethereum, Coinbase, MetaMask, and Sui. Combined with the current trend of currency and stock integration, the imagination space has been doubled. Is web3 AI really dead? Not entirely. Google's AP2 looks complete, but it only achieves technical compatibility with Crypto payments. It can only be regarded as an extension of the traditional authorization framework and belongs to the category of automated execution. There is a "paradigm" difference between it and the autonomous asset management pursued by pure Crypto native solutions. The Crypto-native solutions under exploration are taking the "decentralized custody + on-chain verification" route, including AI Agent autonomous asset management, AI Agent autonomous transactions (DeFAI), AI Agent digital identity and on-chain reputation system (ERC-8004...), AI Agent on-chain governance DAO framework, AI Agent NPC and digital avatars, and many other interesting and fun directions. Ultimately, once users get used to AI Agent payments in traditional fields, their acceptance of AI Agents autonomously owning digital assets will also increase. And for those scenarios that AP2 cannot reach, such as anonymous transactions, censorship-resistant payments, and decentralized asset management, there will always be a time for crypto-native solutions to show their strength? The two are more likely to be complementary rather than competitive, but to be honest, the key technological advancements behind AI Agents currently all come from web2AI, and web3AI still needs to keep up the good work!
Paylaş
PANews2025/09/18 07:00