Wu said that SlowMist's Cosine revealed a user lost approximately $1 million in tokens and NFTs due to signing a phishing transaction. The attacker exploited EIP-7702 to delegate the user's wallet authorization to MetaMask Delegator and transferred assets through a contract call to the Uniswap Universal Router. The victim's entire wallet assets were drained after clicking a single signature confirmation on the phishing site.