Blockchain security platform Phalcon said about $3.55 million in previously unclaimed cross-chain funds was claimed and transferred out roughly six hours before its post. The firm said the key question is whether the transactions were initiated by the rightful owner or by an attacker who obtained valid EIP-7702 authorization. On-chain records show the claim was submitted by address 0x24a9, whose funding came from Tornado Cash, and the execution was carried out through an EIP-7702 delegation on an externally owned account. The two transactions were worth $1.33 million and $2.22 million, and on-chain data confirmed that the authorization used in the process was valid. Phalcon also noted that several days earlier, on-chain researcher stuckfunds.eth had repeatedly sent messages to address 0x4943, informing the owner that the funds were still claimable. At this stage, on-chain data does not show whether the owner signed intentionally, was tricked into signing, or had a private key compromised.
Blockchain security platform Phalcon said roughly $3.55 million in unclaimed cross-chain funds was claimed and transferred out about six hours before its post.
Phalcon said the central question is whether the transactions were initiated by the fund owner or by an attacker who obtained valid EIP-7702 authorization.
On-chain data shows two transfers
On-chain records show the claim was submitted by address 0x24a9. The address was funded through Tornado Cash, and the execution was carried out via EIP-7702 delegation on an externally owned account.
The two transactions were worth $1.33 million and $2.22 million. On-chain data confirmed that the authorization involved was valid.
Researcher had previously alerted the address
Several days earlier, on-chain researcher stuckfunds.eth repeatedly sent messages to address 0x4943, saying the funds were still available to be claimed.
For now, on-chain data cannot determine whether the owner signed intentionally, was induced to sign, or had a private key leaked.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
