Trade Haven Hub - Investing and Stock News
  • Investment Tips
  • Trade Tips
  • Crypto News
  • Economy News
  • Stock Market
  • Investment Tips
  • Trade Tips
  • Crypto News
  • Economy News
  • Stock Market
No Result
View All Result
Trade Haven Hub - Investing and Stock News
No Result
View All Result
Home Crypto News

Wintermute’s “CrimeEnjoyor” to Warn Ethereum Users of Wallet-Draining Attacks

by
June 2, 2025
in Crypto News
0
Wintermute’s “CrimeEnjoyor” to Warn Ethereum Users of Wallet-Draining Attacks
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

Key Takeaways:

Wintermute’s new “CrimeEnjoyor” tool injects on-chain warnings into malicious Ethereum contracts. Over 97% of EIP-7702 delegations are being used in wallet-draining attacks. An Ethereum user recently lost $146K by signing malicious EIP-7702 transactions.

Crypto market maker Wintermute has developed a tool that injects on-chain warnings into malicious wallet-draining contracts to alert users.

The new tool comes as Ethereum users face a new wallet-draining threat that exploits a feature in the network’s latest upgrade.

On May 30, Wintermute revealed it had developed “CrimeEnjoyor,” a code that injects visible warnings into verified malicious Ethereum contracts. The move targets contracts designed to auto-drain wallets when private keys are compromised.

‘Do Not Send ETH’ Warning

The injected message clearly states that the contract “is used by bad guys to automatically sweep all incoming ETH” and prominently advises users to “NOT SEND ANY ETH.”

The malicious contracts exploit Ethereum Improvement Proposal-7702 (EIP-7702), a feature introduced in the recent Pectra upgrade.

EIP-7702 allows wallet owners to temporarily delegate control of their wallets to smart contracts—an opt-in feature meant to expand Ethereum’s capabilities.

However, Wintermute’s research team found troubling patterns.

According to their analysis, over 97% of EIP-7702 delegations were being used in identical sweeping contracts designed to automatically drain ETH from compromised addresses.

“These are sweepers, used to automatically drain incoming ETH from compromised addresses,” Wintermute said in a post on X.

While EIP-7702 brings new convenience, it also introduces new risks

Our Research team found that over 97% of all EIP-7702 delegations were authorized to multiple contracts using the same exact code. These are sweepers, used to automatically drain incoming ETH from compromised… pic.twitter.com/xHp7zr4hC9

— Wintermute (@wintermute_t) May 30, 2025

To inject warnings, the team reverse-engineered the contracts’ Ethereum Virtual Machine (EVM) bytecode into readable Solidity code and then publicly verified it.

As a result, the modified warning now appears inside most of the malicious contracts.

“This one copy-pasted bytecode now accounts for the majority of all EIP-7702 delegations,” Wintermute added. “It’s funny, bleak, and fascinating at the same time.”

While EIP-7702 was designed to offer greater wallet flexibility, its lack of verification features has made it difficult for users—especially newcomers—to distinguish between legitimate and malicious contracts.

Wintermute hopes that tagging compromised contracts will help surface suspicious activity and better protect the ecosystem.

Ethereum User Loses $146K

The risks are real. On May 23, one Ethereum user lost $146,550 after unknowingly signing a batch of malicious EIP-7702 transactions, according to blockchain security firm Scam Sniffer.

ALERT: An address upgraded to EIP-7702 lost $146,551 through malicious batched transactions in phishing attack. pic.twitter.com/7GbamqOZVI

— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) May 24, 2025

Since Ethereum’s Pectra upgrade went live on May 7, users have executed 12,329 EIP-7702 transactions.

Pectra also introduced other significant changes: EIP-725 raised the validator staking limit from 32 ETH to 2,048 ETH, and EIP-7691 increased data blob capacity to improve scalability and lower fees on Ethereum layer-2 networks.

Last month, Vitalik Buterin unveiled a new proposal aimed at making it significantly easier for everyday users to run Ethereum nodes, by reducing the hardware and storage requirements currently needed to sync with the network.

The Ethereum mastermind suggested a shift in how nodes store and retrieve data, moving from full data replication to a more flexible, user-centric model.

Under this approach, nodes would store only the data relevant to the user, rather than Ethereum’s entire global state, which currently exceeds 1.3 terabytes, according to Etherscan.

The post Wintermute’s “CrimeEnjoyor” to Warn Ethereum Users of Wallet-Draining Attacks appeared first on Cryptonews.

Previous Post

Meta Shareholders Reject Proposal to Add Bitcoin to Balance Sheet

Next Post

South Korean NGO Becomes First Entity to Sell Crypto After Phased Ban Lift

Next Post
South Korean NGO Becomes First Entity to Sell Crypto After Phased Ban Lift

South Korean NGO Becomes First Entity to Sell Crypto After Phased Ban Lift

  • Trending
  • Comments
  • Latest
Quantum Computing: its Evolution and its Potential Future

Quantum Computing: its Evolution and its Potential Future

March 20, 2025
Buy Bitcoin Under $100K Before The Next Bull Run

Buy Bitcoin Under $100K Before The Next Bull Run

April 22, 2025
Air Direct Capture – Reducing CO2 from the Atmosphere

Air Direct Capture – Reducing CO2 from the Atmosphere

March 20, 2025
Kraken Rolls Out Commission-Free Stock Trading

Kraken Rolls Out Commission-Free Stock Trading

April 21, 2025
Bitcoin Steady at $107K as FBI Nabs $25M Hacker & India Plots BTC Reserve

Bitcoin Steady at $107K as FBI Nabs $25M Hacker & India Plots BTC Reserve

0
Quantum Computing: its Evolution and its Potential Future

Quantum Computing: its Evolution and its Potential Future

0
Quantum Computing: its Evolution and its Potential Future

Quantum Computing: its Evolution and its Potential Future

0
Air Direct Capture – Reducing CO2 from the Atmosphere

Air Direct Capture – Reducing CO2 from the Atmosphere

0
Bitcoin Steady at $107K as FBI Nabs $25M Hacker & India Plots BTC Reserve

Bitcoin Steady at $107K as FBI Nabs $25M Hacker & India Plots BTC Reserve

June 27, 2025
Crypto Exchange Bakkt Files for $1B Shelf Offering, Plans to Buy Bitcoin

Crypto Exchange Bakkt Files for $1B Shelf Offering, Plans to Buy Bitcoin

June 27, 2025
“Going Vertical”: Coinbase Closes at Record High Despite Analyst Uncertainty

“Going Vertical”: Coinbase Closes at Record High Despite Analyst Uncertainty

June 27, 2025
ChatGPT o3’s 38-Signal AI TRX Price Forecast Reveals Bullish Structure Amid $80 Billion USDT Milestone

ChatGPT o3’s 38-Signal AI TRX Price Forecast Reveals Bullish Structure Amid $80 Billion USDT Milestone

June 27, 2025

    Stay updated with the latest news, exclusive offers, and special promotions. Sign up now and be the first to know! As a member, you'll receive curated content, insider tips, and invitations to exclusive events. Don't miss out on being part of something special.


    By opting in you agree to receive emails from us and our affiliates. Your information is secure and your privacy is protected.

    Recent News

    Bitcoin Steady at $107K as FBI Nabs $25M Hacker & India Plots BTC Reserve

    Bitcoin Steady at $107K as FBI Nabs $25M Hacker & India Plots BTC Reserve

    June 27, 2025
    Crypto Exchange Bakkt Files for $1B Shelf Offering, Plans to Buy Bitcoin

    Crypto Exchange Bakkt Files for $1B Shelf Offering, Plans to Buy Bitcoin

    June 27, 2025
    “Going Vertical”: Coinbase Closes at Record High Despite Analyst Uncertainty

    “Going Vertical”: Coinbase Closes at Record High Despite Analyst Uncertainty

    June 27, 2025
    ChatGPT o3’s 38-Signal AI TRX Price Forecast Reveals Bullish Structure Amid $80 Billion USDT Milestone

    ChatGPT o3’s 38-Signal AI TRX Price Forecast Reveals Bullish Structure Amid $80 Billion USDT Milestone

    June 27, 2025
    • About us
    • Contact us
    • Privacy Policy
    • Terms & Conditions

    Copyright © 2025 tradehavenhub.com | All Rights Reserved

    No Result
    View All Result
    • Investment Tips
    • Trade Tips
    • Crypto News
    • Economy News
    • Stock Market

    Copyright © 2025 tradehavenhub.com | All Rights Reserved