Jul 23, 2026
1 new drain.
New
-
Critical✓Contained
Dormant PancakeSwap LP loses $2.96M after signing a malicious EIP-7702 authorization
A long-inactive PancakeSwap liquidity provider lost about $2.96 million after signing a malicious EIP-7702 authorization, according to Specter monitoring reported by ChainCatcher on 23 July 2026. The attacker pulled about $1.48M of BSC-USD and $1.48M of BUSD liquidity, sent about $1.46M to Tornado Cash and still held about $1.48M in USDT at the time. An EIP-7702 authorization hands control of your whole account to a contract, so never sign one from a site you did not seek out.
A PancakeSwap liquidity provider (BNB Chain)·BNB Chain·$3.0M stolen·Since Jul 23, 2026·