Hack history / 2026 / Hack or exploit
EIP-7702 Victim
Hack or exploit on Apr 3, 2026 · Smart Contract Vulnerability
ONE SOURCE · 1 SOURCE
Lost
$17K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,158
among thefts by dollars lost
What happened
A user EOA on BNB Chain (with EIP-7702 delegation) that had set delegated code via an EIP-7702 Type-4 transaction was drained for ~$17.2K. The delegated code included a pancakeV3SwapCallback() function without proper access control. The attacker directly called this callback with crafted calldata, forcing the victim account to transfer its tokens to an attacker-controlled address. The victim had enabled the delegation to support swap-related logic.
Details
- Date
- Apr 3, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- BNB Chain
Reported by
Related incidents
Victim loses over $32 million to wallet drainer 2024 · Hack or exploit · $32M
Victim loses $11 million to permit phishing 2024 · Scam · $11M
Phishing attack drains $2 million from one victim 2024 · Scam · $2M
Victim loses around $24 million in phishing scam 2023 · Scam · $24M
Victim loses $900,000 to Google Ad phishing 2023 · Scam · $900K
Victim loses $11 million to permit phishing 2024 · Scam · $11M
Phishing attack drains $2 million from one victim 2024 · Scam · $2M
Victim loses around $24 million in phishing scam 2023 · Scam · $24M
Victim loses $900,000 to Google Ad phishing 2023 · Scam · $900K
Cite this page
SwanBluechip, "EIP-7702 Victim hack, Apr 3, 2026: $17K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htf09ab26809/ (data as of 2026-11-01).