Slow Fog Cosine: A user fell victim to an EIP-7702 phishing attack, and all assets from the WLFI private placement were stolen

ChainCatcher news, Slow Mist's Yu Xian stated that a user was phished after participating in the WLFI private placement due to a private key leak, resulting in the complete theft of assets from their MetaMask wallet.

The attack is suspected to exploit the EIP-7702 mechanism, where once the user injects gas or attempts to withdraw WLFI, their assets will be automatically transferred away. It is recommended that if rescue is needed, users can try to use Flashbots for a block race operation, but the threshold is relatively high. Users are reminded to be highly vigilant about the secondary risks brought by private key leaks.