The most secure & intuitive digital asset wallet | Trusted by 20M users worldwide. Support: [email protected] Download: https://nitter.cf/t.co/FASXWVujIx
Singapore
Joined July 2016
- Tweets5.8K
- Following1.4K
- Followers274K
- Likes5.1K
⚠️ Early this morning, a security incident affected a Binance hot wallet. On-chain analysis indicates that the attack involved EIP-7702 delegation. The exact cause and scope of the impact have yet to be confirmed.
A year ago, the imToken security team examined the risks of malicious EIP-7702 authorizations in Issue 39 of its Monthly Security Report and urged users to safeguard control of their accounts.
🔐 For security reasons, imToken currently does not support initiating EIP-7702 delegation, reducing the risk of users inadvertently signing a malicious authorization.
Security reminders:
• Treat unfamiliar signing and authorization requests with caution.
• Avoid using untrusted wallets or extensions for EIP-7702 delegation.
• Keep your recovery phrase and private keys secure, and watch out for phishing scams.
New technology brings convenience, but its potential risks need careful evaluation.
📖 Learn about EIP-7702 delegation risks and how to protect yourself: support.token.im/hc/en-us/ar…
Ethpool is shutting down. What’s next for your ETH?
imToken has supported ETH staking for five years, with no reported security incidents.
With imToken Stake, you can stake non-custodially, compound rewards automatically, and stay in control of withdrawals.
🎬 Watch the video guide to get started.
🔐 How to restake your ETH after leaving Ethpool
To reduce slashing risk when switching providers, exit your Ethpool validators and wait for your ETH to be withdrawn before staking again.
1️⃣Log in to Ethpool and select Profile → Leave Ethpool → EXIT VALIDATORS.
2️⃣Wait for your validators to exit and the ETH to arrive at your withdrawal address.
3️⃣Restake with imToken Stake.
Ethpool’s official FAQ: ethpool.org/faq#sunset
imToken × Pay Protocol
We're partnering with @pay_protocol to help merchants accept and manage digital asset payments.
Connect through imToken to create payment addresses, track deposits, and manage funds—with non-custodial contracts and multisig controls.
Prepare 3 admin wallets and 1 treasury wallet, each with a separate seed phrase. Apply for an invite and register.
After approval and contract deployment, select your TRON account in imToken, open the dashboard via Browser, and sign in with an admin wallet.
Create deposit addresses in Funds → Sub-contracts. Test with at least 1 USDT on the correct network and check the deposit report.
Sweep funds to the vault, then withdraw to your treasury wallet. Automation is optional.
Quick start: collect.payprotocol.network/…
Guide: support.token.im/hc/en-us/ar…
Want to take part in Ethereum while staying in control?
With imToken Stake, your private keys stay with you. You remain in charge of access, without relying on a centralized platform.
Get started: token.im/staking/eth?utm_sou…
Your ETH can help secure Ethereum, block after block.
imToken Stake is live. Take part in staking and get protocol incentives over time.
Here’s what happens when you stake:
zk.money is back.
I’ve reserved my zk.money tag.
Have you claimed yours yet? 👇
invite.zk.money/@imtoken
⚠️ Security Reminder
Your device is the first line of defense for keeping your wallet secure.
🔄 Update your iPhone, iPad, and Mac to the latest system versions.
🔗 Only install apps from trusted sources. Stay cautious with unknown links and suspicious websites.
🔐 Protect your recovery phrase. Never screenshot it, store it online, or enter it on untrusted devices.
🚨 Apple has released an important security update for iOS/iPadOS 26.7.1, addressing CVE-2026-86950, an out-of-bounds write vulnerability that may lead to arbitrary code execution.
As we previously reported, this update is highly relevant to the iOS attack activity we have been tracking. Apple confirmed that the vulnerability may have been exploited in highly sophisticated attacks targeting specific individuals on iOS versions before iOS 27.
For crypto users, this is especially concerning given the iOS exploitation activity we have observed targeting sensitive wallet data.
🔐 Please:
• Update your iPhone, iPad, Mac and other Apple devices to the latest available security updates.
• Avoid installing apps from unknown or untrusted sources.
• Do not open suspicious links in Safari or in-app browsers.
• Treat unexpected files, links and app installation prompts with caution.
Stay alert and keep your devices updated.
Apple Security Update: support.apple.com/en-us/1492…
8/
imToken reminds users:
1️⃣ Do not click on unofficial links claiming to offer “compensation,” “asset recovery,” or “ATOM migration.”
2️⃣ Never share your seed phrase or private key with any website, customer support representative, or anyone contacting you through direct messages.
3️⃣ Users affected by the Neutron, Astroport, or Drop incident should wait for official updates on the postmortem.
9/
As of this writing, Cosmos Hub has resumed block production.
However, official technical postmortems from Neutron, Astroport, and Drop are still pending, as are further details about asset recovery and potential compensation.
We will continue to monitor publicly available information and help users distinguish verified facts and actual risks from market panic.