65k Addresses Linked to $580M Losses in USENIX 2026 Study

Woofun AI reports that a study presented at USENIX Security 2026, initially highlighted by Wu Blockchain, has mapped 65,000 high-risk cryptocurrency addresses across Ethereum and BNB Chain, linking them to substantial financial losses.

The quantified impact reveals a staggering total of $580 million in stolen assets, comprising 126,982.94 ETH and 17,726.7 BNB. These figures underscore the severe financial consequences of security failures within the decentralized finance sector, marking a significant escalation in the scale of on-chain exploits.

A primary attack vector identified involves the misuse of contract accounts through deterministic contract addresses. Attackers exploit predictable address generation to pre-compute and manipulate contract interactions, facilitating unauthorized fund transfers by bypassing standard verification checks before execution.

The second critical vector leverages EIP-7702, which allows externally owned accounts (EOAs) to temporarily adopt smart contract code. In these sophisticated attacks, compromised accounts are redirected to malicious code, enabling attackers to bypass traditional security measures and execute unauthorized transactions.

Woofun AI data shows that addressing these vulnerabilities requires rigorous auditing of contract deployment processes, particularly regarding address generation and authorization mechanisms. Both institutional investors and everyday users must prioritize interacting with reputable platforms and avoid unverified smart contracts to mitigate exposure.

This research provides actionable intelligence for developers, security professionals, and users as they navigate the evolving threat landscape. As protocol upgrades and security patches for EIP-7702 are developed, this early evidence of abuse will be crucial for building a secure and trustworthy ecosystem.