A recent academic study has linked 65,340 high-risk crypto addresses to an estimated $574.8 million in losses on Ethereum and BNB Smart Chain. The study, which analyzed over 16 million private keys leaked on GitHub, identified two categories of misuse: contract account (CA) and externally owned account (EOA) misuse.
The researchers found that the addresses were involved in roughly 2.5 million transactions, resulting in approximately 126,982.94 ETH and 17,726.7 BNB in realized losses. The study also uncovered two previously undocumented attack vectors, which accounted for approximately $15.7 million in losses.
Key Findings
The study's detection methodology achieved a 99.11% overall precision rate during validation. The root cause of the problem is often mundane, with developers hardcoding private keys into their projects for convenience and then pushing the code to public repositories without scrubbing the sensitive data.
Implications
The study's findings have significant implications for the crypto ecosystem. The discovery of the EIP-7702 delegation attack vector is particularly noteworthy, as it suggests that new features can introduce new attack surfaces faster than the ecosystem adapts. Individual holders should consider any address that has had its private key exposed to be compromised, and take steps to protect their assets.
