Digital Asset
Intelligence
Security Incident · BSC Ecosystem

EIP-7702 Victim Smart Contract Vulnerability: $17.20K Reported Loss

·Historical incident record

Incident Overview

A user EOA on BNB Chain (with EIP-7702 delegation) that had set delegated code via an EIP-7702 Type-4 transaction was drained for ~$17.2K. The delegated code included a pancakeV3SwapCallback() function without proper access control. The attacker directly called this callback with crafted calldata, forcing the victim account to transfer its tokens to an attacker-controlled address. The victim had enabled the delegation to support swap-related logic.

Sources & References

Original incident referencehttps://blocksec.com/blog/weekly-web3-security-incident-roundup-mar-30-apr-5-2026 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodReserve Manipulation Attack
    Reported loss$ 1,665,000
  2. Incident date
    Target

    SAS Token

    Attack methodSmart Contract Vulnerability
    Reported loss$ 12,000
  3. Incident date
    Attack methodPrice Manipulation
    Reported loss$ 950,000
  4. Incident date
    Target

    Adobe

    Attack methodSupply Chain Attack
    Reported loss0
  5. Incident date
    Target

    HypurrFi

    Attack methodDomain Hijacking
    Reported loss0