Wintermute confirmed that EIP-7702 was not used to hack wallets directly but to automate fund theft from wallets already compromised through prior private key leaks.

Quotes that support claims

EIP-7702 has not caused private key leaks. Instead, attackers are using its automation tools to drain wallets that are already exposed.

He clarified that attackers didn’t use EIP-7702 to hack the wallets but to streamline theft from wallets with already exposed private keys.