Blockchain security firm BlockSec said an address that had previously received funds through Tornado Cash used EIP-7702 delegated execution roughly six hours earlier to claim and move about $3.55 million in unclaimed cross-chain bridge funds from another address. Before that, on-chain researcher stuckfunds.eth had repeatedly sent messages to the address, warning that funds were still available to be claimed. BlockSec said on-chain data confirms the authorization was valid, but it cannot yet determine whether the signature was made by the owner voluntarily, obtained through deception, or resulted from a private key compromise. The update was cited by Techub News and attributed in the item to Wu Blockchain.
Techub News reported, citing blockchain security firm BlockSec, that about six hours earlier an address that had obtained funds through Tornado Cash used EIP-7702 delegated execution to claim and transfer roughly $3.55 million in unclaimed cross-chain bridge funds held on another address.
Before the transfer, on-chain researcher stuckfunds.eth had repeatedly sent messages to that address, warning that funds were still available to be claimed.
BlockSec says authorization was valid
BlockSec said on-chain data confirms the authorization was valid. The firm added that it is still unable to determine whether the action was signed by the holder voluntarily, signed after the holder was deceived, or caused by a private key leak.
The item was cited by Wu Blockchain.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
