PancakeSwap LP signs malicious EIP-7702 authorization, resulting in a loss of $2.96 million

On chain security officer Specter detected that a PancakeSwap liquidity provider lost approximately $2.96 million due to signing a malicious EIP-7702 authorization. The attacker removed $1.48 million BSC USD and $1.48 million BUSD liquidity from the victim and exchanged BUSD for ETH. The attacker has deposited approximately $1.46 million into Tornado Cash, with the remaining approximately $1.48 million in USDT stored in the attacker's address.