Sodium Wallet signature bypass drains 11.76 ETH in gas deposits from 300 Arbitrum wallets
𝕏/@DefimonAlerts •
Revision history
3 recorded changes
Want your article here?
Promote with Leviathan NewsAn access-control bug in Sodium’s ERC-4337 signature path let an attacker pass validation for 300 wallets using a self-chosen session key and an EIP-1271 contract that accepted every signature. The attacker set maxFeePerGas near 4,062 gwei and callGasLimit to zero, forcing all 300 operations to fail while EntryPoint paid 11.76 ETH from victim gas deposits to the beneficiary, about $21,200 at $1,799.65 per ETH.
TLDR by @Benthic
Explore the topic
More on $ETH
Ethereum's next growth wave will be driven by real businesses choosing Ethereum L1+L2 over standalone chains, with Robinhood cited as the blueprint for onchain adoption
𝕏/@ryanberckmans ·
William Mougayar argues Ethereum is following the Internet's adoption curve, with stablecoins and tokenized assets proving its infrastructure value before markets fully price it
𝕏/@wmougayar ·
Ethereum Foundation's AI agents uncovered a validator crash bug in Ethereum's networking layer, but human engineers were crucial in separating real flaws from AI hallucinations
Coindesk ·
Ethereum Institutional expands hiring across GTM, marketing, community, and technical roles as global institutions accelerate tokenization and onchain adoption
𝕏/@ethereuminsti ·
Why Ethereum’s Supercycle Has Finally Started, Says Sharplink CEO
Youtube ·
Rysk V12 expands to Ethereum mainnet, enabling upfront income from asset options
𝕏/@ryskfinance ·
Ethereum's next growth wave will be driven by real businesses choosing Ethereum L1+L2 over standalone chains, with Robinhood cited as the blueprint for onchain adoption
𝕏/@ryanberckmans ·
William Mougayar argues Ethereum is following the Internet's adoption curve, with stablecoins and tokenized assets proving its infrastructure value before markets fully price it
𝕏/@wmougayar ·
Ethereum Foundation's AI agents uncovered a validator crash bug in Ethereum's networking layer, but human engineers were crucial in separating real flaws from AI hallucinations
Coindesk ·
Ethereum Institutional expands hiring across GTM, marketing, community, and technical roles as global institutions accelerate tokenization and onchain adoption
𝕏/@ethereuminsti ·
Why Ethereum’s Supercycle Has Finally Started, Says Sharplink CEO
Youtube ·
Rysk V12 expands to Ethereum mainnet, enabling upfront income from asset options
𝕏/@ryskfinance ·