ZachXBT says addresses of an institution had a total of 973000 tokens MORPHO stolen, worth approximately 2300000 USD, with the funds deposited into Tornado Cash。
Article
⚡️ZachXBT: An institution 973000 tokens MORPHO were stolen, worth approximately 2300000 USD BlockBeats reports that October 21, on-chain investigator ZachXBT stated that addresses of an institution had a total of 973000 tokens MORPHO stolen, worth approximately 2300000 USD, and the related funds have been deposited into Tornado Cash. The thefts from both victim addresses involved EIP-7702 account delegation transactions.
According to his tracing, the entity behind of the addresses had previously had approximately October 9 stolen in 3500000 USD. These assets originated from claims on an old cross-chain bridge, then were bridged from Ethereum to Zcash via NEAR Intents and entered the Ironwood privacy pool. ZachXBT also noted that the victim address has an on-chain connection with an address suspected of belonging to Nima Capital.
Original link https://m.theblockbeats.info/flash/372942
Key points
01
BlockBeats said the news was published on October 21。
02
ZachXBT stated that addresses of an institution had a total of 973000 tokens MORPHO stolen several hours ago, worth approximately 2300000 USD。
03
ZachXBT says the related funds have been deposited into Tornado Cash。
04
The thefts from both victim addresses involved EIP-7702 account delegation transactions.
05
According to ZachXBT's tracing, the entity behind of the addresses had previously had approximately October 9 stolen in 3500000 USD。
06
The article states that the previously stolen assets originated from claims on an old cross-chain bridge, then were bridged from Ethereum to Zcash via NEAR Intents and entered the Ironwood privacy pool.
07
ZachXBT says the victim address has an on-chain connection with an address suspected of belonging to Nima Capital.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This is an on-chain theft-tracing report. ZachXBT says that addresses controlled by an institution lost MORPHO, after which the funds entered Tornado Cash; the report also links the incident to EIP-7702 account delegation transactions. The article also mentions another prior theft involving the entity behind of the addresses and the flow path of those assets.
Why it matters to readers
The incident involved approximately 2300000 USD of MORPHO, and mentioned EIP-7702 account delegation transactions, which may draw users' attention to the security risks of account delegation and related operations. The funds entering Tornado Cash may also make subsequent tracing more difficult.
Beginners should handle account authorizations and delegation transactions cautiously, and should not infer from this report alone that the MORPHO project itself has a vulnerability; the original article does not specify the attack method or attribution of responsibility.
Risks and unknowns
The report is BlockBeats' account of ZachXBT's on-chain tracing; the original article does not provide independent confirmation from the victim institution or an official source.
The identity of the victim institution and specific details of the addresses were not disclosed in the evidence.
The original article does not state whether the assets can be recovered, the identity of the attacker, or the specific attack process.
EIP-7702 The original article does not explain how account delegation transactions caused or were involved in the theft.
Related Developments
Loading event timeline…
The ownership of the address associated with Nima Capital is described only as “suspected” and remains unconfirmed.
Whether the previous theft of approximately 3500000 USD and this incident involved the same attacker or have a direct causal relationship cannot be confirmed.
Related concepts
EIP-7702 Account delegation transactions
This term is not in the glossary yet. Browse related concepts in the glossary.
