Security platform Phalcon: Approximately 3.55 million USD of unclaimed cross-chain funds have been transferred out

The blockchain security platform Phalcon stated that approximately 6 hours ago, around 3.55 million dollars of unclaimed cross-chain funds were claimed and transferred. Phalcon raised the question: Was the related transaction initiated by the fund owner, or did the attacker obtain valid EIP-7702 authorization?

On-chain information shows that the claim was submitted by address 0x24a9, with funds coming from Tornado Cash and executed through EIP-7702 delegation on an external account. The two transaction amounts were 1.33 million dollars and 2.22 million dollars, with on-chain data confirming the validity of the related authorization.

A few days ago, on-chain researcher stuckfunds.eth repeatedly sent messages to address 0x4943, informing the owner that the related funds were still claimable. Currently, on-chain data cannot confirm whether the owner intentionally signed, was induced to sign, or if the private key has been leaked.