An investor's WLFI participating in the private sale was completely stolen due to a private key leak exploited by EIP-7702 phishing.

PANews reported on August 31 that Slow Mist's Yu Xin disclosed on platform X that an investor lost all WLFI participating in the private sale due to a private key leak. He stated that this is a classic case of EIP-7702 phishing exploitation. First, the private key was leaked, and the phishing gang (possibly more than one) set up an ambush at the wallet address corresponding to the victim's private key with the EIP-7702 exploitation mechanism. This mechanism will automatically transfer any remaining Token, such as the WLFI tokens thrown into the Lockbox contract, as long as someone tries to transfer them. The idea of a preemptive strike is feasible: input Gas, cancel or replace the ambushed EIP-7702 with one's own, and transfer valuable Tokens. These three actions are packaged and sent in one Block using flashbots.