FlashPANews
New Ethereum Draft Proposes Allowing Wallets to Permanently Disable EIP-7702 Delegation
Ethereum developer nicolashw submitted a draft core EIP proposal titled "Permanent Opt-Out of EOA Delegation" on October 30, which intends to allow key-controlled wallets to permanently disable EIP-7702 delegation, enabling account owners to reject smart contract execution on their existing addresses. The proposal has not yet been assigned a number, remains in an open and unmerged state, and requires a network upgrade for activation. The draft will utilize a currently invalid EIP-7702 Type 4 transaction to install a non-executable three-byte marker in the account, causing future delegation authorizations to be skipped. The account retains its address, standard transfer, and contract call capabilities, but incoming calls will not execute code. The draft notes that this feature only blocks EIP-7702 delegation and cannot mitigate other risks following a private key compromise.
More flash news
View allBinance is in license negotiations with Malaysian regulators, seeking to re-enter the local market
Binance is in discussions with Malaysian regulatory authorities to obtain a license to operate in the country. A Binance spokesperson stated that over the past 10 months, Binance has been engaging with the Securities Commission Malaysia and Bank Negara Malaysia to explore a licensed pathway for offering products and services in Malaysia, with discussions covering "the feasibility and structure of a licensed business model in Malaysia". If approved, Binance will be able to formally re-enter the Malaysian market, where its operations have been restricted for more than five years. In July 2021, the Securities Commission Malaysia found that Binance was operating a digital asset exchange illegally at the time, and ordered it to cease all operations in Malaysia, including halting all media and marketing activities. The commission removed Binance from its investor alert list in 2024, but re-added it earlier this month without providing any explanation for the move.
Step Drainer Attack Has Spread to 10 Websites Including StonkFun and Pickle Finance
The Step Drainer attack has been detected on 10 additional websites, including stonkfun.xyz, pickle.finance, echelon.market, origami.finance, fluxbeam.xyz, stakepoint.app, supswap.xyz, longbow.cash, shprd.finance, and apexdefi.xyz. Active investigations are underway to collect further data. Separately, StonkFun has stated that its website has been restored following migration to new infrastructure, on-chain operations remain unaffected, and no impacted users have been identified to date.
ICE reissues trade.xyz partnership announcement, revises wording to include "plans to introduce" and "subject to regulatory approval"
Intercontinental Exchange (ICE), parent company of the New York Stock Exchange, has reissued its trade.xyz partnership announcement, updating the wording to include the phrases "plans to introduce" and "subject to regulatory approval".
Hong Kong Interbank Clearing Limited Warns of Virtual Wallet Scams, Fake Websites Deceive Users into Disclosing Bank Account Details
Hong Kong Interbank Clearing Limited has publicly disclosed a new phishing website scam risk targeting general users, reminding all users of crypto assets and payment services to remain vigilant. <p>Two fraudulent sites impersonating the institution's official website have been identified. Bad actors disguise themselves as official service channels, claiming to provide FPS online transaction security support covering services such as refunds, reporting unauthorized online transactions, and transaction assistance. They induce users to complete top-up and withdrawal operations via virtual wallets, thereby defrauding users into submitting personal private information and sensitive bank account details.</p><p>The institution has issued an official clarification that it does not directly provide FPS services to individual members of the general public in its daily operations, and will never proactively contact individual ordinary users to request relevant information.</p><p>Officials advise all users not to submit any personal identification documents, bank account information, or conduct virtual wallet-related transfer operations to such suspicious fake sites. In case of suspicious circumstances, users may directly contact formal official channels to verify identities, to avoid unnecessary losses to their assets.</p>
Blockchain investigator Chainalysis hit by cybersecurity incident
Chainalysis has engaged world-class third-party experts to support a review of its security and strengthen its defenses.