掃碼下載
BTC $77,028.42 +0.25%
ETH $2,326.25 +1.99%
BNB $626.10 +0.09%
XRP $1.39 +0.42%
SOL $84.75 +1.13%
TRX $0.3221 -0.49%
DOGE $0.1023 +3.06%
ADA $0.2490 +0.76%
BCH $453.29 +1.38%
LINK $9.34 +0.70%
HYPE $40.54 -1.35%
AAVE $97.11 -0.58%
SUI $0.9315 +0.07%
XLM $0.1633 -0.93%
ZEC $336.05 +0.03%
BTC $77,028.42 +0.25%
ETH $2,326.25 +1.99%
BNB $626.10 +0.09%
XRP $1.39 +0.42%
SOL $84.75 +1.13%
TRX $0.3221 -0.49%
DOGE $0.1023 +3.06%
ADA $0.2490 +0.76%
BCH $453.29 +1.38%
LINK $9.34 +0.70%
HYPE $40.54 -1.35%
AAVE $97.11 -0.58%
SUI $0.9315 +0.07%
XLM $0.1633 -0.93%
ZEC $336.05 +0.03%

慢霧:EIP-7702 賬戶漏洞遭利用,1,988.5 枚 QNT 被盜

2026-04-29 12:10:45
收藏

ChainCatcher 消息,据市場消息,攻擊者利用一個存在缺陷的 EIP-7702 帳戶,從 QNT 儲備池盜取 1,988.5 枚 QNT(約合 54.93 枚 ETH)。根本原因在於,該儲備池管理員 EOA 通過 EIP-7702 將代碼委託給 BatchExecutor 合約,而該合約將無權限控制的 BatchCall 合約設為授權調用方。

由於 BatchCall.batch() 函數未設置任何權限校驗,任意外部調用者均可調用,最終導致儲備池資產被耗盡。

app_icon
ChainCatcher 與創新者共建Web3世界