Officer's NotesRelated: Ethereum Pectra upgrade adds new featuresWallets can be altered with offchain signatureYehor Rudytsia, onchain researcher at Hacken, noted that this new transaction type introduced by Pectra allows arbitrary code to be installed on the user’s account, essentially turning their wallet into a programmable smart contract.“This tx type allows the user to set arbitrary code (smart contract) to be able to execute operations on the user’s behalf,” Rudytsia said.
Arda Usman, a Solidity smart contract auditor, confirmed to Cointelegraph that “it becomes possible for an attacker to drain an EOA’s funds using only an offchain signed message (no direct onchain transaction signed by the user).”At the center of the risk is EIP-7702, a core component of the Pectra upgrade.
This new form of attack can be easily executed through common offchain interactions like phishing emails, fake DApps, or Discord scams.“We believe it will be the most popular attack vector regarding these breaking changes introduced by Pectra,” Rudytsia said.“From now on, users have to carefully validate what they are going to sign.”Source: NoirRelated: Pectra features already in use: Ethereum EIP-7702 wallets roll outHardware wallets are not safer anymoreHardware wallets are no longer inherently safer, Rudytsia said.
or
Share This Story
Article Details
Author / Journalist: Cointelegraph by Amin Haqshanas
The story "Pectra lets hackers drain wallets with just an offchain signature" has 775 words across 27 sentences, which will take approximately 4 - 7 minutes for the average person to read.
Which news outlet covered this story?
The story "Pectra lets hackers drain wallets with just an offchain signature" was covered 1 days ago by Coin Telegraph, a news publisher based in United States.
How trustworthy is 'Coin Telegraph' news outlet?
Coin Telegraph is a fully independent (privately-owned) news outlet established in 2013 that covers mostly crypto news.
The outlet is headquartered in United States and publishes an average of 27 news stories per day.
It's most recent story was published 7 hours ago.
What do people currently think of this news story?
The sentiment for this story is currently Negative, indicating that people regard this as "bad news".
How do I report this news for inaccuracy?
You can report an inaccurate news publication to us via our contact page. Please also include the news #ID number and the URL to this story.
