{"id":290119,"date":"2024-04-26T07:11:04","date_gmt":"2024-04-26T01:41:04","guid":{"rendered":"https:\/\/dripp.zone\/news\/?p=290119"},"modified":"2024-04-26T07:11:04","modified_gmt":"2024-04-26T01:41:04","slug":"ethereum-upgrade-to-improve-wallets-but-unlock-new-attacks-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/ethereum-upgrade-to-improve-wallets-but-unlock-new-attacks-crypto-news\/","title":{"rendered":"Ethereum Upgrade To Improve Wallets But Unlock New Attacks &#8211; Crypto News"},"content":{"rendered":"<p>EIP-3074 will introduce smart contract functionality for regular Ethereum wallets as part of the Pectra upgrade.<\/p>\n<div>\n<p>Ethereum core developers have locked in EIP-3074 for inclusion in the network\u2019s next major upgrade, Pectra. While the proposal would introduce advanced functionality for regular Ethereum wallets, some onlookers fear EIP-3074 will also make users vulnerable to new exploits.<\/p>\n<p><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/github.com\/ethereum\/EIPs\/blob\/master\/EIPS\/eip-3074.md\">EIP-3074<\/a> was penciled in for Ethereum\u2019s Pectra hard fork during the April 11 All Core Devs Execution <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.youtube.com\/watch?v=FWvi_z1_gB0\">call<\/a>.<\/p>\n<p>The Ethereum Improvement Proposal (EIP) would add greater functionality to externally owned account (EOA) wallets by allowing users to delegate control over their wallet to a smart contract.<\/p>\n<p>On the <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/github.com\/ethereum\/EIPs\/blob\/master\/EIPS\/eip-3074.md\">Github<\/a> repository for EIP-3047, developers said the primary motivation for the upgrade is enabling \u201csponsored transactions,\u201d which allow users to pay for fees using an asset other than Ether. They note that it is now common for Ethereum wallets to hold tokens but not possess any Ether, however, some tokens must be converted into Ether in order to pay for gas fees to execute transactions.<\/p>\n<p>\u201cWithout Ether to pay for the conversion, it&#8217;s impossible to convert them,\u201d the repository states. \u201cSponsored transactions break the circular dependency.\u201d<\/p>\n<p>Tim Beiko from the Ethereum Foundation noted that EIP-3074 has \u201cbroad support\u201d from client team teams and core developers. \u201cTeams were in agreement about moving forward in the EIP,\u201d Beiko <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/TimBeiko\/status\/1778489895587360814\">said<\/a>. \u201c3074 will be included in Pectra.\u201d<\/p>\n<h2>Ethereum community reacts<\/h2>\n<p>Many prominent figures within the Ethereum community took to Twitter to celebrate EIP-3074\u2019s inclusion, with Hayden Adams, the founder of Uniswap, <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/haydenzadams\/status\/1778513861408129181\">describing<\/a> the proposal as a \u201cmonumental upgrade to Ethereum UX.\u201d<\/p>\n<p>0xCygaar, a contributor to Frame, <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/0xCygaar\/status\/1778522744919044442\">said<\/a> 3074 overcomes several limitations associated with existing EOA accounts, including the need for separation transactions for token approvals, the inability to perform actions with ETH, and a lack of defense against lost keys.<\/p>\n<p>\u201c[EIP-3074] gives EOAs (normal wallets) smart contract capabilities,\u201d 0xCygaar tweeted. \u201cThis includes the ability to do single tx approvals, batch txs, wallet asset recovery, sponsored txs, and more\u2026 This could be huge for gaining mass retail adoption.\u201d<\/p>\n<p>However, other onlookers warned that enhanced wallet functionality will come with an increasing in the risks posed by exploits.<\/p>\n<p>\u201cIt should allow a scammer to drain your entire wallet with a single off-chain signature,\u201d <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/itamarl\/status\/1778482999782150241\">said<\/a> Itamar Lesuisse, the co-founder of Argent, a Starknet wallet provider. \u201cI expect this will be a major use case.\u201d<\/p>\n<p>\u201cDownside of EIP-3074 is that now it&#8217;ll be possible to fully drain an address (all tokens, all NFTs, all DeFi positions&#8230;) with only one bad signature,\u201d <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/0xngmi\/status\/1778539816180965778\">said<\/a> 0xngmi from DeFiLlama.<\/p>\n<p>Mudit Gupta, the chief information security officer at Polygon, <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/Mudit__Gupta\/status\/1778666806653456869\">tweeted<\/a> that wallets should release a feature allowing users to ban EIP-3074 transactions. \u201cFor security reasons, I do not want to expose my cold wallets to [account abstraction] batching,\u201d Gupta said.<\/p>\n<p>0xZodomo, a developer for Delegate, a web3 identity service, similarly <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/0xZodomo\/status\/1778578201188393112\">warned<\/a> that wallet drainers will become more powerful as a result of EIP-3074\u2019s implementation. However, they conceded that there is \u201cno good way to avoid\u201d increasing attack surfaces while also shipping UX improvements.<\/p>\n<h2>Pectra hard fork<\/h2>\n<p>Ethereum\u2019s Pectra hard fork is currently <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.galaxy.com\/insights\/research\/ethereum-all-core-developers-execution-call-178\/\">expected<\/a> to take place towards the end of 2025.<\/p>\n<p>The main upgrade included in Pectra is the introduction of statelessness via <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/ethereum.org\/en\/roadmap\/verkle-trees\/\">Verkle Trees<\/a>, meaning clients will not need to store Ethereum\u2019s entire state history to validate blocks \u2014 reducing the hardware requirements for validators.<\/p>\n<p>Vitalik Buterin, Ethereum\u2019s chief scientist, recently described Verkle Trees as the last remaining \u201c<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/thedefiant.io\/news\/cefi\/vitalik-urges-ethereum-developers-to-target-millions-of-users-post-dencun\">truly significant<\/a>\u201d upgrade slated to go live on Layer 1 Ethereum. He argued that statelessness will expand the network\u2019s validator ecosystem and further bolster its decentralization.<\/p>\n<p>\u201cI&#8217;m really looking forward to Verkle trees,\u201d Buterin <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/VitalikButerin\/status\/1759365739671412841\">tweeted<\/a>. \u201cThey will enable stateless validator clients, which can allow staking nodes to run with near-zero hard disk space and sync nearly instantly\u2026 In the long term, running a node will\u2026 be very easy to do as a background process on any computer, maybe even a phone, even inside a browser.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>EIP-3074 will introduce smart contract functionality for regular Ethereum wallets as part of the Pectra upgrade. Ethereum core developers have locked in EIP-3074 for inclusion in the network\u2019s next major upgrade, Pectra. While the proposal would introduce advanced functionality for regular Ethereum wallets, some onlookers fear EIP-3074 will also make users vulnerable to new exploits. [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":290123,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[274,273,272,244,266,271,268,270,269,267],"class_list":["post-290119","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-de-fi","tag-crypto-finance","tag-decentralized-finance","tag-liquidity","tag-metamask","tag-pancake","tag-slippage","tag-sushiswap","tag-tronlink","tag-trust-wallet","tag-uniswap"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/290119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=290119"}],"version-history":[{"count":3,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/290119\/revisions"}],"predecessor-version":[{"id":290126,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/290119\/revisions\/290126"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/290123"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=290119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=290119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=290119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}