# EIP-7702 delegation phishing · Drain Watch

3 incidents, 2 live. JSON: https://drains.watch/t/eip-7702-phishing.json · RSS: https://drains.watch/t/eip-7702-phishing/feed.xml

- [Dormant EIP-7702 authorization used weeks later to drain an Ethereum wallet](https://drains.watch/i/eip-7702-delegation-drain-22k-oct-2026) (live, Medium, Still active, since Oct 14, 2026)
- [USENIX study: over 63% of EIP-7702 authorization transactions tied to malicious contracts](https://drains.watch/i/eip-7702-usenix-study-malicious-delegations-aug-2026) (live, Low, Still active, since Aug 1, 2026)
- [Dormant PancakeSwap LP loses $2.96M after signing a malicious EIP-7702 authorization](https://drains.watch/i/eip-7702-pancakeswap-lp-2-96m-jul-2026) (closed, Critical, Contained, since Jul 23, 2026)