The sudden transfer of $3.55 million in unclaimed bridge assets using Ethereum's EIP-7702 mechanism has sparked security debates after BlockSec noted valid signatures do not guarantee intentional user approval.