• bitcoinBitcoin (BTC) $ 95,662.00
  • ethereumEthereum (ETH) $ 3,639.19
  • xrpXRP (XRP) $ 2.64
  • tetherTether (USDT) $ 0.997098
  • solanaSolana (SOL) $ 227.74
  • bnbBNB (BNB) $ 653.84
  • dogecoinDogecoin (DOGE) $ 0.419168
  • cardanoCardano (ADA) $ 1.28
  • usd-coinUSDC (USDC) $ 0.998771
  • staked-etherLido Staked Ether (STETH) $ 3,635.07
  • avalanche-2Avalanche (AVAX) $ 51.38
  • tronTRON (TRX) $ 0.230164
  • shiba-inuShiba Inu (SHIB) $ 0.000030
  • the-open-networkToncoin (TON) $ 6.66
  • stellarStellar (XLM) $ 0.535271
  • chainlinkChainlink (LINK) $ 25.11
  • wrapped-stethWrapped stETH (WSTETH) $ 4,322.42
  • polkadotPolkadot (DOT) $ 10.08
  • hedera-hashgraphHedera (HBAR) $ 0.343103
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 95,420.00
  • bitcoin-cashBitcoin Cash (BCH) $ 538.64
  • wethWETH (WETH) $ 3,641.83
  • suiSui (SUI) $ 3.44
  • litecoinLitecoin (LTC) $ 130.32
  • nearNEAR Protocol (NEAR) $ 7.30
  • pepePepe (PEPE) $ 0.000021
  • uniswapUniswap (UNI) $ 14.26
  • leo-tokenLEO Token (LEO) $ 8.76
  • aptosAptos (APT) $ 14.05
  • wrapped-eethWrapped eETH (WEETH) $ 3,843.09
  • internet-computerInternet Computer (ICP) $ 13.77
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.700109
  • crypto-com-chainCronos (CRO) $ 0.203111
  • usdsUSDS (USDS) $ 0.997809
  • vechainVeChain (VET) $ 0.064586
  • ethereum-classicEthereum Classic (ETC) $ 33.56
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 1.89
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • render-tokenRender (RENDER) $ 9.10
  • algorandAlgorand (ALGO) $ 0.559837
  • bittensorBittensor (TAO) $ 616.61
  • filecoinFilecoin (FIL) $ 7.32
  • arbitrumArbitrum (ARB) $ 1.07
  • kaspaKaspa (KAS) $ 0.157268
  • cosmosCosmos Hub (ATOM) $ 9.82
  • blockstackStacks (STX) $ 2.41
  • daiDai (DAI) $ 0.999411
  • aaveAave (AAVE) $ 235.73
  • immutable-xImmutable (IMX) $ 2.07
  • celestiaCelestia (TIA) $ 7.90
  • fantomFantom (FTM) $ 1.21
  • whitebitWhiteBIT Coin (WBT) $ 23.29
  • okbOKB (OKB) $ 54.57
  • mantra-daoMANTRA (OM) $ 3.54
  • bonkBonk (BONK) $ 0.000043
  • dogwifcoindogwifhat (WIF) $ 3.20
  • injective-protocolInjective (INJ) $ 32.81
  • optimismOptimism (OP) $ 2.54
  • moneroMonero (XMR) $ 170.26
  • hyperliquidHyperliquid (HYPE) $ 9.22
  • mantleMantle (MNT) $ 0.902036
  • the-graphThe Graph (GRT) $ 0.305289
  • theta-tokenTheta Network (THETA) $ 2.83
  • sei-networkSei (SEI) $ 0.657890
  • worldcoin-wldWorldcoin (WLD) $ 3.38
  • ethenaEthena (ENA) $ 0.827530
  • ondo-financeOndo (ONDO) $ 1.61
  • thorchainTHORChain (RUNE) $ 6.65
  • flokiFLOKI (FLOKI) $ 0.000229
  • bitget-tokenBitget Token (BGB) $ 1.59
  • binance-peg-wethBinance-Peg WETH (WETH) $ 3,631.26
  • galaGALA (GALA) $ 0.051974
  • kaiaKaia (KAIA) $ 0.362148
  • quant-networkQuant (QNT) $ 139.84
  • based-brettBrett (BRETT) $ 0.198895
  • pyth-networkPyth Network (PYTH) $ 0.533569
  • makerMaker (MKR) $ 2,177.06
  • the-sandboxThe Sandbox (SAND) $ 0.777820
  • flare-networksFlare (FLR) $ 0.036068
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.994694
  • rocket-pool-ethRocket Pool ETH (RETH) $ 4,070.24
  • jasmycoinJasmyCoin (JASMY) $ 0.037884
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 95,708.00
  • arweaveArweave (AR) $ 27.13
  • flowFlow (FLOW) $ 1.13
  • eosEOS (EOS) $ 1.12
  • mantle-staked-etherMantle Staked Ether (METH) $ 3,806.61
  • lido-daoLido DAO (LDO) $ 1.89
  • iotaIOTA (IOTA) $ 0.483809
  • tezosTezos (XTZ) $ 1.64
  • starknetStarknet (STRK) $ 0.726268
  • jupiter-exchange-solanaJupiter (JUP) $ 1.20
  • beam-2Beam (BEAM) $ 0.029587
  • matic-networkPolygon (MATIC) $ 0.698260
  • heliumHelium (HNT) $ 8.83
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 3,742.75
  • kucoin-sharesKuCoin (KCS) $ 12.54
  • virtual-protocolVirtuals Protocol (VIRTUAL) $ 1.48
  • axie-infinityAxie Infinity (AXS) $ 9.41
  • raydiumRaydium (RAY) $ 5.04
  • solv-btcSolv Protocol SolvBTC (SOLVBTC) $ 95,136.00
  • bitcoin-svBitcoin SV (BSV) $ 74.07
  • gatechain-tokenGate (GT) $ 11.51
  • bittorrentBitTorrent (BTT) $ 0.000001
  • coredaoorgCore (CORE) $ 1.53
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 3,737.43
  • neoNEO (NEO) $ 19.38
  • elrond-erd-2MultiversX (EGLD) $ 48.84
  • ethereum-name-serviceEthereum Name Service (ENS) $ 40.88
  • decentralandDecentraland (MANA) $ 0.704551
  • peanut-the-squirrelPeanut the Squirrel (PNUT) $ 1.30
  • dydx-chaindYdX (DYDX) $ 1.81
  • aioz-networkAIOZ Network (AIOZ) $ 1.12
  • popcatPopcat (POPCAT) $ 1.25
  • apecoinApeCoin (APE) $ 1.68
  • msolMarinade Staked SOL (MSOL) $ 283.66
  • xdce-crowd-saleXDC Network (XDC) $ 0.078672
  • aerodrome-financeAerodrome Finance (AERO) $ 1.64
  • zcashZcash (ZEC) $ 73.98
  • conflux-tokenConflux (CFX) $ 0.237502
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 3,641.29
  • tokenize-xchangeTokenize Xchange (TKX) $ 13.72
  • chilizChiliz (CHZ) $ 0.117768
  • mina-protocolMina Protocol (MINA) $ 0.879587
  • fasttokenFasttoken (FTN) $ 3.17
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 95,532.00
  • binance-staked-solBinance Staked SOL (BNSOL) $ 233.07
  • akash-networkAkash Network (AKT) $ 4.13
  • ecasheCash (XEC) $ 0.000052
  • pendlePendle (PENDLE) $ 6.04
  • mantle-restaked-ethMantle Restaked ETH (CMETH) $ 3,811.59
  • solv-protocol-solvbtc-bbnSolv Protocol SolvBTC.BBN (SOLVBTC.BB) $ 95,501.00
  • curve-dao-tokenCurve DAO (CRV) $ 0.774648
  • wormholeWormhole (W) $ 0.346589
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 243.15
  • nexoNEXO (NEXO) $ 1.46
  • pancakeswap-tokenPancakeSwap (CAKE) $ 3.26
  • axelarAxelar (AXL) $ 1.08
  • notcoinNotcoin (NOT) $ 0.009074
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 95,126.00
  • havvenSynthetix Network (SNX) $ 2.75
  • ordinalsORDI (ORDI) $ 42.35
  • mog-coinMog Coin (MOG) $ 0.000002
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.419294
  • zksyncZKsync (ZK) $ 0.228176
  • oasis-networkOasis (ROSE) $ 0.123908
  • cat-in-a-dogs-worldcat in a dogs world (MEW) $ 0.009389
  • roninRonin (RON) $ 2.22
  • dydxdYdX (ETHDYDX) $ 1.80
  • nervos-networkNervos Network (CKB) $ 0.017434
  • blurBlur (BLUR) $ 0.390275
  • grassGrass (GRASS) $ 3.25
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 3,635.11
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000142
  • neiro-3Neiro (NEIRO) $ 0.001835
  • compound-governance-tokenCompound (COMP) $ 86.15
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 3,637.68
  • usddUSDD (USDD) $ 0.997952
  • arkhamArkham (ARKM) $ 2.36
  • kavaKava (KAVA) $ 0.663505
  • goatseus-maximusGoatseus Maximus (GOAT) $ 0.727536
  • eigenlayerEigenlayer (EIGEN) $ 3.83
  • gnosisGnosis (GNO) $ 274.25
  • reserve-rights-tokenReserve Rights (RSR) $ 0.013008
  • layerzeroLayerZero (ZRO) $ 6.22
  • kusamaKusama (KSM) $ 43.05
  • safeSafe (SAFE) $ 1.32
  • echelon-primeEchelon Prime (PRIME) $ 13.23
  • superfarmSuperVerse (SUPER) $ 1.47
  • 1inch1inch (1INCH) $ 0.500729
  • dog-go-to-the-moon-runeDOG•GO•TO•THE•MOON (Runes) (DOG) $ 0.006562
  • zilliqaZilliqa (ZIL) $ 0.034331
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 3,955.11
  • dashDash (DASH) $ 54.33
  • book-of-memeBOOK OF MEME (BOME) $ 0.009427
  • tether-goldTether Gold (XAUT) $ 2,645.26
  • fraxFrax (FRAX) $ 0.994505
  • holotokenHolo (HOT) $ 0.003576
  • astarAstar (ASTR) $ 0.084306
  • bitcoin-goldBitcoin Gold (BTG) $ 35.13
  • amp-tokenAmp (AMP) $ 0.007610
  • super-oethSuper OETH (SUPEROETHB) $ 3,653.30
  • moo-dengMoo Deng (MOODENG) $ 0.619803
  • enjincoinEnjin Coin (ENJ) $ 0.338713
  • woo-networkWOO (WOO) $ 0.322821
  • stepnGMT (GMT) $ 0.234528
  • bazaarsBazaars (BZR) $ 9.83
  • theta-fuelTheta Fuel (TFUEL) $ 0.088684
  • creditcoin-2Creditcoin (CTC) $ 1.45
  • livepeerLivepeer (LPT) $ 16.23
  • snekSnek (SNEK) $ 0.007870
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000028
  • apenftAPENFT (NFT) $ 0.00000059
  • iotexIoTeX (IOTX) $ 0.061454
  • qubic-networkQubic (QUBIC) $ 0.000005
  • dexeDeXe (DEXE) $ 10.00
  • celoCelo (CELO) $ 1.01
  • ether-fi-staked-btcEther.fi Staked BTC (EBTC) $ 95,522.00
  • 0x0x Protocol (ZRX) $ 0.649822
  • beldexBeldex (BDX) $ 0.079860

How to stay safe on-chain: Three crypto users lose $876K within hours

0 9

How to stay safe on-chain: Three crypto users lose $876K within hours

  protos.com 5 h

How to stay safe on-chain: Three crypto users lose $876K within hours

In just over 15 hours, three unlucky crypto users lost a total of $876,000 worth of assets to common on-chain scams.

A combination of techniques, specifically ‘approval phishing’ and ‘address poisoning,’ were used in the scams, which were spotted by X (formerly Twitter) account Scam Sniffer.

The first, and largest, of the thefts was caused by a user signing a malicious ‘permit’ transaction, allowing the scammer to steal 211 Lido-staked ether (stETH) worth $654,000.

Phishing with drainers

According to Scam Sniffer, the address to which the victim had inadvertently granted approval to move their stETH was “a malicious contract disguised as a Token.” These dangerous permit or approval transactions are often presented to users by scam-as-as-service malware packages called wallet ‘drainers.’

The drainers are often disseminated via hacked X (formerly Twitter) accounts, which can be used to post FOMO-stoking airdrop or token launch announcements, before linking the victim to a wallet drainer script.

Prolific blockchain detective ZachXBT described the typical workings of such groups, who take control of accounts via SIM-swapping, in a post on X last year.

Another method is via so-called ‘front-end’ attacks, in which the genuine domains of crypto platforms are hijacked to craft malicious transactions and serve drainers to potential victims’ wallets.

Drainer packages themselves are developed as a product or service to be used by the phishing scammers. A cut of each theft is automatically split between the drainer developers and the scammers that use them.

This model has proven to be extremely profitable. In May, when a prolific drainer service known as Pink Drainer announced its retirement after facilitating $75 million worth of thefts, crypto security firm SlowMist identified over $20 million held in related addresses.

Inferno Drainer, which shut down a year ago, has been cashing out its ill-gotten gains recently, sending a total of 4,010 ETH (currently worth $12.4 million) to sanctioned crypto mixer Tornado Cash. Previous attempts to use alternative privacy tool Railgun were blocked by the team.

Address poisoning scam

The other two victims lost similar amounts (111,500 and 111,726) of the USDT stablecoin to ‘address poisoning,’ a type of scam which, while much simpler, proves equally dangerous.

Address poisoning relies on victims accidentally copy/pasting a scammer’s address from a ‘contaminated’ transaction history on a blockchain explorer such as Etherscan.

Often, following sizable transfers, fake versions of common tokens will suddenly appear in a potential victim’s address, or appear as ‘spoofed’ transfers to accounts with similar leading and trailing characters to the genuine address (as can be seen in Scam Sniffer’s screenshot above).

Despite efforts to hide these misleading transactions by the explorer’s developers, losses are still common. For higher-value victims, scammers even opt to send genuine tokens as a workaround, putting real money on the line whilst hoping to hook a big win.

Staying off the hook

As always, double-check the URL or X account handles before clicking any links or connecting a crypto wallet. However, this may not be enough in the case that the genuine website or account has been compromised.

Learn how approvals and permits work. It is important to maintain strict ‘approval hygiene,’ revoking any active approvals and avoiding setting or accepting ‘infinite’ approvals when prompted.

Additionally, the use of built-in wallet address books can flag any unexpected addresses involved in a transaction which may be harder to spot by eye. These addresses can then be re-used instead of copying from a (potentially contaminated) transfer history.

Don’t rush, and don’t sign anything you don’t understand

Despite these well-known security measures, plenty of accidents still occur. Be it down to distraction, FOMO, rushing, or tiredness, it’s not difficult to imagine how even experienced crypto users fall for these scams on a regular basis.

Scam Sniffer’s most recent monthly round-up identified “approximately 12K victims [who] lost $20.2 million to crypto phishing scams” in October, with four cases of over $1 million. Despite an overall total 56% lower than the previous month, the number of victims grew by 20%.

Source

Leave A Reply

Your email address will not be published.