Ethereum study flags 65,340 risky addresses tied to $574.8M

cryptonews13:08

A USENIX Security ’26 study has identified 65,340 high-risk address instances across Ethereum and BNB Smart Chain, linking them to 126,982.94 ETH and 17,726.7 BNB in native-token losses. Summary ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2659902571?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-08-14 13:08","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2659902571","market":"sg","top_or_hot":-1,"title":"Ethereum study flags 65,340 risky addresses tied to $574.8M","media":"cryptonews","content":"<div>\n<p>A USENIX Security ’26 study has identified 65,340 high-risk address instances across Ethereum and BNB Smart Chain, linking them to 126,982.94 ETH and 17,726.7 BNB in native-token losses. \n\n\nSummary\n\n\n...</p>\n\n<a href=\"https://crypto.news/ethereum-study-flags-65340-risky-addresses-tied-to-574-8m/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Ethereum study flags 65,340 risky addresses tied to $574.8M</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nEthereum study flags 65,340 risky addresses tied to $574.8M\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-08-14 13:08 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/ethereum-study-flags-65340-risky-addresses-tied-to-574-8m/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>A USENIX Security ’26 study has identified 65,340 high-risk address instances across Ethereum and BNB Smart Chain, linking them to 126,982.94 ETH and 17,726.7 BNB in native-token losses. \n\n\nSummary\n\n\n...</p>\n\n<a href=\"https://crypto.news/ethereum-study-flags-65340-risky-addresses-tied-to-574-8m/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BITW","symbol_name":"Bitwise 10 Crypto Index ETF","start_time":0,"source_url":"https://crypto.news/ethereum-study-flags-65340-risky-addresses-tied-to-574-8m/","article_id":"2659902571","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/ethereum-study-flags-65340-risky-addresses-tied-to-574-8m/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2659902571","pubTimestamp":1786684083,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"A USENIX Security ’26 study has identified 65,340 high-risk address instances across Ethereum and BNB Smart Chain, linking them to 126,982.94 ETH and 17,726.7 BNB in native-token losses.Researchers identified 65,340 high-risk address instances across Ethereum and BNB Chain in their large-scale study.Estimated losses reached 126,982.94 ETH and 17,726.7 BNB, valued by researchers above $574.8 million overall.Researchers extracted 16.3 million private keys from 63,004 GitHub repositories for their cross-chain analysis dataset.The paper, presented at the 35th USENIX Security Symposium in Baltimore, estimates their dollar value at more than $574.8 million.The dollar figure needs context. The researchers say they valued the token losses using reference prices of $4,408 per ETH and $847 per BNB rather than prices at the time of every transaction. They describe their findings as a “conservative lower bound” because the analysis covers only native ETH and BNB on the two networks and may miss le","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"BITW":"Bitwise 10 Crypto Index ETF","SETH":"1倍做空以太币期货ETF-Proshares","STCE":"Schwab Crypto Thematic ETF","ARKY":"ARK 21SHARES ACTIVE BITCOIN ETHEREUM STRATEGY ETF","CRPT":"First Trust SkyBridge Crypto Industry and Digital Economy ETF","EZET":"以太坊ETF-Franklin","03179":"嘉实以太币","ETHD":"ProShares UltraShort Ether ETF","ESK":"REX-Osprey ETH + Staking ETF","09179":"嘉实以太币-U","ETHE":"最大以太坊ETF-Grayscale","CBXO":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - October","YBTC":"比特币看涨期权ETF-Roundhill","BTC":"Grayscale Bitcoin Mini Trust","LFGY":"YieldMax Crypto Industry and Tech Portfolio Option Income ETF","ETHI":"Defiance Leveraged Long Income Ethereum ETF","CBXY":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - July","QETH":"以太坊ETF-Invesco Galaxy","ETTY":"Amplify Ethereum 3% Monthly Option Income Etf","ETCO":"Grayscale Ethereum Covered Call ETF","ETHT":"ProShares Ultra Ether ETF","09046":"华夏以太币-U","BETE":"等权重比特币&以太币期货ETF-ProShares","ETU":"T-Rex 2X Long Ether Daily Target ETF","BTF":"比特币&以太币期货ETF-CoinShares","GDLC":"Grayscale CoinDesk Crypto 5 ETF","YETH":"Roundhill Ether Covered Call Strategy ETF","BETH":"比特币&以太币期货ETF-ProShares","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January","ETHU":"2倍以太币期货ETF-Volatility Shares","03046":"华夏以太币","NCIQ":"HASHDEX NASDAQ CRYPTO INDEX US ETF","ETHV":"以太坊ETF-VanEck","03009":"博时以太币","BEGS":"RAREVIEW 2X BULL CRYPTOCURRENCY & PRECIOUS METALS ETF","ETHW":"以太坊ETF-Bitwise","BITQ":"Bitwise Crypto Industry Innovators ETF","CETH":"以太坊ETF-21Shares","ETH":"低成本以太坊ETF-Grayscale","FETH":"以太币ETF-Fidelity","EETH":"以太币期货ETF-ProShares","HODL":"比特币ETF-VanEck","ETHA":"以太坊ETF-iShares","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","AETH":"以太坊策略ETF-Bitwise","09009":"博时以太币-U","BKCH":"AdvisorShares Sabretooth ETF"},"translate_title":"以太币研究发现 65,340 个风险地址，涉及 5.748 亿美元","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"EZET":1.5,"03009":0.9,"GDLC":1.5,"BETH":1.5,"QETH":1.5,"CBTJ":0.6,"STCE":1.5,"YBTC":0.6,"HODL":0.6,"ETHW":1.5,"CETH":1.5,"ETTY":1.5,"ETU":1.5,"ETHT":1.5,"BTC":0.6,"BTF":1.5,"ETHU":1.5,"ETHA":1.5,"ARKY":1.5,"CBXY":0.6,"LFGY":1.5,"METHmain":1.5,"CRPT":1.5,"ETCO":0.6,"BITQ":1.5,"BEGS":1.5,"ETHI":0.6,"ETHV":1.5,"ETQ":0.6,"YETH":1.5,"09046":1.5,"09179":1.5,"BITW":1.5,"03046":0.9,"ETH":1.5,"AETH":1.5,"03179":0.9,"ETHD":1.5,"BKCH":1.5,"SETH":0.6,"NCIQ":0.9,"09009":1.5,"BETE":1.5,"ESK":0.6,"FETH":1.5,"CBXO":0.6,"ETHE":1.5,"EETH":1.5},"content_text":"A USENIX Security ’26 study has identified 65,340 high-risk address instances across Ethereum and BNB Smart Chain, linking them to 126,982.94 ETH and 17,726.7 BNB in native-token losses. \n\n\nSummary\n\n\n\nResearchers identified 65,340 high-risk address instances across Ethereum and BNB Chain in their large-scale study.\nEstimated losses reached 126,982.94 ETH and 17,726.7 BNB, valued by researchers above $574.8 million overall.\nResearchers extracted 16.3 million private keys from 63,004 GitHub repositories for their cross-chain analysis dataset.\nTheir detection framework achieved 99.11% precision after manual sampling validation across both analyzed blockchain networks.\nTwo newly described attack vectors exploited deterministic contract addresses and EIP-7702 delegated account control mechanisms.\n\n\n\nThe paper, presented at the 35th USENIX Security Symposium in Baltimore, estimates their dollar value at more than $574.8 million.\nThe dollar figure needs context. The researchers say they valued the token losses using reference prices of $4,408 per ETH and $847 per BNB rather than prices at the time of every transaction. They describe their findings as a “conservative lower bound” because the analysis covers only native ETH and BNB on the two networks and may miss less obvious cases.\n\nUSENIX Security '26 Study Identifies 65,000+ High-Risk Crypto Addresses Linked to $574.8M in LossesA study presented at USENIX Security '26 identified 65,340 high-risk cryptocurrency addresses involved in abuse across Ethereum and BNB Chain, with estimated losses exceeding… pic.twitter.com/JAX3IR6Kgy— Wu Blockchain (@WuBlockchain) August 13, 2026\n\nEthereum address misuse spans contract and private-key risks\nThe researchers divide “Address Misuse” into two categories. Contract Account misuse happens when users treat an address without deployed contract code as a contract address, often because the same address is used in another network context. The study identified 49,344 such instances, associated with losses of 22,738.41 ETH and 8,681.41 BNB.\nExternally Owned Account misuse involves addresses whose private keys are exposed or show strong onchain signs of compromised control. Researchers identified 15,996 EOA misuse instances associated with 104,244.53 ETH and 9,045.29 BNB in losses. More than 95% of EOA misuse losses came from the GitHub exposed-key subtype.\nTwo new attack paths account for about $15.7M\nThe first newly described attack takes advantage of deterministic contract-address creation. Attackers can promote a contract address on a testnet, wait for users to mistakenly send mainnet funds to the matching no-code address, and later deploy withdrawal code at the same location. Researchers linked 469 malicious contracts to 3,446.37 ETH and 431.79 BNB in losses.\nThe second uses EIP-7702 against accounts with already exposed private keys. Attackers delegate those EOAs to malicious code that automatically sweeps incoming funds. The paper found 17,270 cases, producing losses of 25.86 ETH and 33.45 BNB. Using the paper’s reference prices, the two newly described vectors together account for roughly $15.7 million.\nThe 99.11% figure is precision, not universal verification\nThe team mined 63,004 GitHub repositories created between January 2015 and May 2025, extracting 10.3 million unique candidate addresses and 16.3 million private keys after deduplication. It also used Ethereum Stack Exchange and Stack Overflow data before analyzing transactions on Ethereum and BNB Smart Chain.\nResearchers manually sampled results and reported 99.11% overall detection precision. That does not mean every one of the 65,340 instances was individually manually verified. The authors acknowledge possible heuristic false positives and incomplete data, while ERC-20, NFT and other chains are excluded from the headline loss calculation.\nEIP-7702 security concerns are widening\nEthereum’s official guidance warns that malicious EIP-7702 delegation can give hostile contract code control over assets. A separate USENIX Security ’26 study found more than 63% of analyzed EIP-7702 authorization transactions were associated with malicious EOA-targeted attacks, identifying 924 malicious contract accounts across seven supported chains.\nAs previously reported, EIP-7702 delegations were linked to automated wallet-draining activity after Ethereum’s Pectra upgrade. In related coverage, attackers later drained about $3.1 million from Polymarket users through phishing and malicious delegated execution.\nThe authors recommend wallet warnings for known exposed keys and cross-chain contract mismatches, stronger secret management for developers and clearer address-to-network documentation. They also propose considering chain identifiers in future contract-address derivation. Those are research recommendations, not adopted Ethereum or BNB Chain protocol changes.\nThe researchers plan to expand future work to additional chains and token types. Until then, the 126,982.94 ETH and 17,726.7 BNB totals are best read as measured native-token losses within the study’s defined scope, while $574.8 million remains a standardized valuation estimate.\n\n\n\n\n\n                Read more:\n            \n\n                SharpLink plans $200M ETH stake through Lido","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.47.1","shortVersion":"4.47.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2659902571","isCrawlerRequest":true}