Slow Mist Detects EIP-7702 Exploit: QNT Reserve Pool Loses 1,988.5 QNT (~$54.93M in ETH)

QNT0.51%
ETH1.91%

Gate News message, April 29 — Slow Mist detected a malicious transaction exploiting a vulnerability in an EIP-7702 account, resulting in the loss of 1,988.5 QNT (approximately 54.93 ETH) from a QNT reserve pool.

The vulnerability stemmed from a structural flaw in the reserve pool’s access control. An administrator EOA address delegated its code to a BatchExecutor contract via the EIP-7702 mechanism. The BatchExecutor contract then designated an unpermissioned BatchCall contract as an authorized caller. However, the BatchCall.batch() function lacked any permission checks, creating an arbitrary call vulnerability.

Attackers exploited this gap to execute unauthorized calls against the reserve pool and steal QNT tokens. The incident highlights risks associated with improper delegation and insufficient permission validation in smart contract design, particularly when using EIP-7702’s code delegation feature.

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

BTC Below $73,151 Could Trigger $1.122B in Long Liquidations on Major CEXs

Gate News message, April 29 — According to Coinglass data, if Bitcoin falls below $73,151, cumulative long liquidations on major centralized exchanges would reach $1.122 billion. Conversely, if BTC breaks above $80,203, cumulative short liquidations on major CEXs would reach $956 million.

GateNews2h ago

Newly Created Wallet Receives Additional 20,000 ETH from CEX, Total Holdings Reach 45,000 ETH

Gate News message, a newly created wallet has received an additional 20,000 ETH (valued at $45.85 million) from a CEX, likely belonging to Bitmine. According to Onchain Lens, this wallet previously received 25,000 ETH ($57.13 million) from BitGo on April 29, 2026. The wallet has now accumulated a to

GateNews3h ago

DeFi United Rescue Initiative Raises Over 137,700 ETH Worth $315.45 Million

Gate News message, April 29 — The DeFi United rescue initiative led by Aave has raised 137,708.343 ETH, valued at approximately $315.45 million, according to official data.

GateNews4h ago

ETH Liquidation Thresholds: $785M in Long Liquidations at $2,174, $759M in Short Liquidations at $2,399

Gate News message, April 29 — According to Coinglass data, if Ethereum falls below $2,174, the cumulative long liquidation strength across major CEXs will reach $785 million. Conversely, if ETH breaks above $2,399, the cumulative short liquidation strength across major CEXs will reach $759 million.

GateNews4h ago

BitMine Stakes Additional 107,992 ETH Worth $248M in Two Hours

Gate News message, April 29 — According to OnchainLens, BitMine, Ethereum's leading staking service provider, staked an additional 107,992 ETH worth approximately $248 million two hours ago. BitMine's total staked ETH now reaches 3,923,389 tokens, valued at approximately $8.98 billion.

GateNews5h ago

LayerZero Commits 10,000 ETH to DeFi United Recovery

LayerZero announced on Tuesday that it will contribute 10,000 ETH to the DeFi United initiative formed to address fallout from the $292 million Kelp DAO exploit. The crypto infrastructure provider is pledging 5,000 ETH directly to DeFi United and depositing an additional 5,000 ETH to strengthen Aave

CryptoFrontier7h ago
Comment
0/400
No comments