Investor's WLFI Tokens Stolen Due to Private Key Leak

According to PANews, a security incident involving the theft of WLFI tokens from a private investor has been disclosed by SlowMist's Cosine on the X platform. The theft occurred due to a private key leak, which led to the exploitation of the EIP-7702 phishing mechanism. This mechanism was strategically set up by phishing groups, potentially more than one, at the wallet address corresponding to the leaked private key. The EIP-7702 mechanism automatically transfers any gas fees intended for moving remaining tokens, such as those locked in Lockbox contracts, to the attackers. The attackers employed a strategy involving the injection of gas, canceling or replacing the embedded EIP-7702 mechanism with their own, and transferring valuable tokens. These actions were executed using flashbots, allowing them to be bundled and sent within a single block.