*B;*26;UN<*ZXTA/T*3YMP]
SYSTEM PROCESSING...
*B;*26;UN<*ZXTA/T*3YMP]
SYSTEM PROCESSING...
Posted: 2025-04-13 18:03:29 UTC
This article contains some claims that remain unverified. While much of the content may be accurate, exercise care when relying on this information.
This article contains some claims that remain unverified. While much of the content may be accurate, exercise care when relying on this information.
Status
Last Updated
2025-04-13 18:08:00 UTC
Verified By
Rollup News
A warning about a potential vulnerability in smart contracts that rely on `tx.origin == msg.sender` to restrict interactions to externally owned accounts (EOA). The upcoming Ethereum Pectra hardfork includes a change (EIP-7702) that could allow smart contracts to bypass this check, potentially leading to exploits.
Smart contracts using `tx.origin == msg.sender` for access control
Ethereum Pectra hardfork and EIP-7702
Potential exploits by allowing smart contracts to interact with contracts designed for EOAs only
DeFi protocols at risk
Smart contracts incorrectly assuming only EOAs can interact with them
Blackhats actively testing for this vulnerability
Need to update contracts before the Pectra hardfork to avoid potential exploits