Drained $5.6B from Binance using bleeding-edge EIP-7702 batch signatures.
Caught because MetaMask default-selected "pay gas with USDT" and logged their IP on ConsenSys servers.
You couldn't write a better script:
- Wallet had 1.75B USDT and 2 native ETH ready for gas.
- In a panic, the operator blindly clicked confirm without noticing MetaMask's smart gas station.
- MetaMask relayer paid the ETH, charged 127 USDT, and logged the raw client request on their backend API.
Advanced chain exploitation defeated by Web2 frontend UX.
One more thing to avoid.
Caught because MetaMask default-selected "pay gas with USDT" and logged their IP on ConsenSys servers.
You couldn't write a better script:
- Wallet had 1.75B USDT and 2 native ETH ready for gas.
- In a panic, the operator blindly clicked confirm without noticing MetaMask's smart gas station.
- MetaMask relayer paid the ETH, charged 127 USDT, and logged the raw client request on their backend API.
Advanced chain exploitation defeated by Web2 frontend UX.
One more thing to avoid.
44โค๏ธ1๐1๐ฑ1
