USENIX Security '26 research identified 65,340 high-risk addresses linked to $574.8M in crypto losses via contract account misuse and EIP-7702 exploits.
Security & Exploits ·
Research presented at USENIX Security '26 has identified 65,340 high-risk addresses across Ethereum and BNB Chain involved in cryptocurrency abuse, with cumulative losses estimated at $574.8 million. The compromised addresses corresponded to 126,982.94 ETH and 17,726.7 BNB stolen.
The study pinpointed two distinct exploitation methods responsible for approximately $15.7 million in direct losses. The first centered on abuse of contract accounts and their deterministic addresses, while the second leveraged EIP-7702 to redirect compromised accounts toward malicious smart contracts capable of executing unauthorized transfers. Researchers derived their findings by examining GitHub repositories and extracting over 16.3 million unique private keys to correlate with affected addresses.
The methodology achieved 99.11% detection accuracy, though broader questions remain about the full scope of ongoing EIP-7702-related risks and whether additional attack vectors beyond the two identified remain active across these chains.