Specter: Malicious EIP-7702 Signature Attack Causes $2.96 Million Loss for PancakeSwap LP

According to Odaily, on-chain security analyst Specter has detected that a long-inactive PancakeSwap liquidity provider (LP) lost approximately $2.96 million after signing a malicious EIP-7702 authorization. Reportedly, the attacker removed around $1.48 million BSC-USD and $1.48 million BUSD liquidity provided by the victim, and exchanged the BUSD for ETH. Currently, the attacker has deposited about $1.46 million into Tornado Cash, while the remaining approximately $1.48 million USDT remains in the attacker's address.