Security Incident · BSC Ecosystem
EIP-7702 Victim Smart Contract Vulnerability: $17.20K Reported Loss
A user EOA on BNB Chain (with EIP-7702 delegation) that had set delegated code via an EIP-7702 Type-4 transaction was drained for ~$17.2K.
- Reported loss
- $ 17,200
- Attack category
- Smart Contract Vulnerability
Incident Overview
The delegated code included a pancakeV3SwapCallback() function without proper access control. The attacker directly called this callback with crafted calldata, forcing the victim account to transfer its tokens to an attacker-controlled address. The victim had enabled the delegation to support swap-related logic.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.