Fireblocks: Recently discovered a vulnerability in the ERC-4337 account abstraction of the smart contract wallet UniPass, which has now been fully patched

ChainCatcher news, cryptocurrency custody platform Fireblocks stated that it recently discovered an ERC-4337 account abstraction vulnerability in the smart contract wallet UniPass. This vulnerability allows attackers to fully take over the UniPass wallet by replacing the wallet's trusted EntryPoint to activate the account abstraction module. Once the account takeover is complete, the attacker can treat the wallet as their own and steal all the funds within it. The vulnerability has now been fixed in collaboration between both parties.