Following the Ethereum Pectra upgrade and the implementation of EIP-7702, a surge of malicious contracts named CrimeEnjoyor has been detected. These contracts exploit the mechanism allowing users to authorize wallet permissions to smart contracts, aiming to scan and transfer funds. Despite the widespread deployment, attackers have not yet profited from these activities. Over 97% of EIP-7702 authorizations are linked to a suspected automatic coin theft tool, with attackers investing approximately 2.88 ETH to authorize 79,000 addresses. The largest address processed over 52,000 authorizations, highlighting potential security vulnerabilities in EIP-7702.