• bitcoinBitcoin (BTC) $ 66,885.00
  • ethereumEthereum (ETH) $ 3,116.02
  • tetherTether (USDT) $ 1.00
  • bnbBNB (BNB) $ 580.87
  • solanaSolana (SOL) $ 172.63
  • usd-coinUSDC (USDC) $ 0.999565
  • staked-etherLido Staked Ether (STETH) $ 3,110.09
  • xrpXRP (XRP) $ 0.523485
  • the-open-networkToncoin (TON) $ 6.51
  • dogecoinDogecoin (DOGE) $ 0.155916
  • cardanoCardano (ADA) $ 0.482211
  • shiba-inuShiba Inu (SHIB) $ 0.000025
  • avalanche-2Avalanche (AVAX) $ 37.23
  • tronTRON (TRX) $ 0.124406
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 66,973.00
  • polkadotPolkadot (DOT) $ 7.21
  • bitcoin-cashBitcoin Cash (BCH) $ 484.15
  • chainlinkChainlink (LINK) $ 16.22
  • nearNEAR Protocol (NEAR) $ 7.97
  • matic-networkPolygon (MATIC) $ 0.717075
  • litecoinLitecoin (LTC) $ 84.21
  • internet-computerInternet Computer (ICP) $ 13.08
  • fetch-aiFetch.ai (FET) $ 2.37
  • uniswapUniswap (UNI) $ 7.55
  • leo-tokenLEO Token (LEO) $ 5.89
  • daiDai (DAI) $ 1.00
  • pepePepe (PEPE) $ 0.000010
  • ethereum-classicEthereum Classic (ETC) $ 28.99
  • hedera-hashgraphHedera (HBAR) $ 0.115144
  • render-tokenRender (RNDR) $ 10.07
  • aptosAptos (APT) $ 8.63
  • wrapped-eethWrapped eETH (WEETH) $ 3,235.44
  • first-digital-usdFirst Digital USD (FDUSD) $ 1.00
  • immutable-xImmutable (IMX) $ 2.38
  • cosmosCosmos Hub (ATOM) $ 8.67
  • crypto-com-chainCronos (CRO) $ 0.125935
  • mantleMantle (MNT) $ 1.01
  • filecoinFilecoin (FIL) $ 5.91
  • arweaveArweave (AR) $ 48.43
  • stellarStellar (XLM) $ 0.108688
  • blockstackStacks (STX) $ 2.12
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 3,063.25
  • okbOKB (OKB) $ 50.21
  • the-graphThe Graph (GRT) $ 0.317105
  • kaspaKaspa (KAS) $ 0.121934
  • optimismOptimism (OP) $ 2.60
  • dogwifcoindogwifhat (WIF) $ 2.80
  • arbitrumArbitrum (ARB) $ 1.03
  • makerMaker (MKR) $ 2,839.27
  • vechainVeChain (VET) $ 0.036136
  • bittensorBittensor (TAO) $ 381.18
  • suiSui (SUI) $ 1.08
  • moneroMonero (XMR) $ 135.37
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • injective-protocolInjective (INJ) $ 25.02
  • thorchainTHORChain (RUNE) $ 6.82
  • theta-tokenTheta Network (THETA) $ 2.24
  • fantomFantom (FTM) $ 0.800439
  • flokiFLOKI (FLOKI) $ 0.000208
  • rocket-pool-ethRocket Pool ETH (RETH) $ 3,448.28
  • jupiter-exchange-solanaJupiter (JUP) $ 1.30
  • celestiaCelestia (TIA) $ 9.51
  • coredaoorgCore (CORE) $ 1.88
  • bonkBonk (BONK) $ 0.000025
  • sei-networkSei (SEI) $ 0.561199
  • lido-daoLido DAO (LDO) $ 1.81
  • galaGALA (GALA) $ 0.045348
  • bitget-tokenBitget Token (BGB) $ 1.09
  • algorandAlgorand (ALGO) $ 0.184415
  • mantle-staked-etherMantle Staked Ether (METH) $ 3,210.24
  • ondo-financeOndo (ONDO) $ 1.01
  • whitebitWhiteBIT Coin (WBT) $ 9.86
  • quant-networkQuant (QNT) $ 97.82
  • akash-networkAkash Network (AKT) $ 5.95
  • flowFlow (FLOW) $ 0.899531
  • aaveAave (AAVE) $ 88.59
  • bitcoin-svBitcoin SV (BSV) $ 66.24
  • singularitynetSingularityNET (AGIX) $ 0.988790
  • beam-2Beam (BEAM) $ 0.024522
  • bittorrentBitTorrent (BTT) $ 0.000001
  • dydx-chaindYdX (DYDX) $ 2.07
  • flare-networksFlare (FLR) $ 0.028330
  • neoNEO (NEO) $ 15.68
  • elrond-erd-2MultiversX (EGLD) $ 40.76
  • cheeleeCheelee (CHEEL) $ 19.18
  • axie-infinityAxie Infinity (AXS) $ 7.51
  • worldcoin-wldWorldcoin (WLD) $ 5.03
  • chilizChiliz (CHZ) $ 0.122006
  • zebec-protocolZebec Protocol (ZBC) $ 0.021159
  • ethenaEthena (ENA) $ 0.720170
  • msolMarinade Staked SOL (MSOL) $ 205.16
  • gatechain-tokenGate (GT) $ 7.98
  • the-sandboxThe Sandbox (SAND) $ 0.448304
  • wormholeWormhole (W) $ 0.561113
  • tokenize-xchangeTokenize Xchange (TKX) $ 12.46
  • jasmycoinJasmyCoin (JASMY) $ 0.020308
  • ecasheCash (XEC) $ 0.000050
  • eosEOS (EOS) $ 0.823034
  • safeSafe (SAFE) $ 2.20
  • kucoin-sharesKuCoin (KCS) $ 9.82
  • tezosTezos (XTZ) $ 0.942066
  • aioz-networkAIOZ Network (AIOZ) $ 0.837814
  • roninRonin (RON) $ 2.80
  • conflux-tokenConflux (CFX) $ 0.223955
  • mina-protocolMina Protocol (MINA) $ 0.812779
  • havvenSynthetix Network (SNX) $ 2.69
  • ordinalsORDI (ORDI) $ 41.28
  • starknetStarknet (STRK) $ 1.16
  • book-of-memeBOOK OF MEME (BOME) $ 0.012076
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 3,122.60
  • decentralandDecentraland (MANA) $ 0.435211
  • lido-staked-solLido Staked SOL (STSOL) $ 205.02
  • ribbon-financeRibbon Finance (RBN) $ 0.828643
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 3,140.62
  • gnosisGnosis (GNO) $ 306.17
  • apecoinApeCoin (APE) $ 1.26
  • heliumHelium (HNT) $ 4.70
  • pendlePendle (PENDLE) $ 4.90
  • dexeDeXe (DEXE) $ 13.02
  • nexoNEXO (NEXO) $ 1.32
  • kavaKava (KAVA) $ 0.677912
  • usddUSDD (USDD) $ 0.997474
  • nervos-networkNervos Network (CKB) $ 0.016338
  • theta-fuelTheta Fuel (TFUEL) $ 0.109657
  • iotaIOTA (IOTA) $ 0.220474
  • pancakeswap-tokenPancakeSwap (CAKE) $ 2.69
  • pyth-networkPyth Network (PYTH) $ 0.464062
  • axelarAxelar (AXL) $ 1.06
  • echelon-primeEchelon Prime (PRIME) $ 17.79
  • klay-tokenKlaytn (KLAY) $ 0.180621
  • fraxFrax (FRAX) $ 0.997695
  • ocean-protocolOcean Protocol (OCEAN) $ 0.990113
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000109
  • livepeerLivepeer (LPT) $ 19.30
  • oasis-networkOasis Network (ROSE) $ 0.093643
  • frax-etherFrax Ether (FRXETH) $ 3,099.29
  • bitcoin-goldBitcoin Gold (BTG) $ 35.55
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000029
  • fasttokenFasttoken (FTN) $ 1.97
  • mantra-daoMANTRA (OM) $ 0.744346
  • blurBlur (BLUR) $ 0.378070
  • tether-goldTether Gold (XAUT) $ 2,418.25
  • swethSwell Ethereum (SWETH) $ 3,286.98
  • osmosisOsmosis (OSMO) $ 0.872243
  • dydxdYdX (ETHDYDX) $ 2.07
  • jito-governance-tokenJito (JTO) $ 4.65
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 3,327.73
  • woo-networkWOO (WOO) $ 0.300571
  • illuviumIlluvium (ILV) $ 84.65
  • xdce-crowd-saleXDC Network (XDC) $ 0.036408
  • wemix-tokenWEMIX (WEMIX) $ 1.50
  • golemGolem (GLM) $ 0.541147
  • astarAstar (ASTR) $ 0.093070
  • curve-dao-tokenCurve DAO (CRV) $ 0.432539
  • arkhamArkham (ARKM) $ 2.40
  • true-usdTrueUSD (TUSD) $ 1.00
  • raydiumRaydium (RAY) $ 1.92
  • pepecoin-2PepeCoin (PEPECOIN) $ 4.38
  • 0x0x Protocol (ZRX) $ 0.612253
  • aerodrome-financeAerodrome Finance (AERO) $ 1.09
  • staked-frax-etherStaked Frax Ether (SFRXETH) $ 3,370.36
  • apenftAPENFT (NFT) $ 0.00000049
  • iotexIoTeX (IOTX) $ 0.051174
  • superfarmSuperVerse (SUPER) $ 1.05
  • memecoin-2Memecoin (MEME) $ 0.026178
  • enjincoinEnjin Coin (ENJ) $ 0.322630
  • dymensionDymension (DYM) $ 2.77
  • radixRadix (XRD) $ 0.044928
  • ethereum-name-serviceEthereum Name Service (ENS) $ 15.05
  • mx-tokenMX (MX) $ 4.72
  • venomVenom (VENOM) $ 0.281412
  • celoCelo (CELO) $ 0.864480
  • 1inch1inch (1INCH) $ 0.399419
  • polymeshPolymesh (POLYX) $ 0.444713
  • trust-wallet-tokenTrust Wallet (TWT) $ 1.10
  • stepnGMT (GMT) $ 0.224047
  • ankrAnkr Network (ANKR) $ 0.045122
  • pax-goldPAX Gold (PAXG) $ 2,390.30
  • altlayerAltLayer (ALT) $ 0.324750
  • nosanaNosana (NOS) $ 5.25
  • zilliqaZilliqa (ZIL) $ 0.023862
  • biconomyBiconomy (BICO) $ 0.564699
  • popcatPopcat (POPCAT) $ 0.437066
  • magaMAGA (TRUMP) $ 9.25
  • siacoinSiacoin (SC) $ 0.007308
  • ravencoinRavencoin (RVN) $ 0.029845
  • terra-luna-2Terra (LUNA) $ 0.596751
  • project-galaxyGalxe (GAL) $ 3.55
  • holotokenHolo (HOT) $ 0.002299
  • manta-networkManta Network (MANTA) $ 1.63
  • arcblockArcblock (ABT) $ 4.13
  • reserve-rights-tokenReserve Rights (RSR) $ 0.008116
  • ether-fiEther.fi (ETHFI) $ 3.51
  • amp-tokenAmp (AMP) $ 0.007125
  • paypal-usdPayPal USD (PYUSD) $ 0.998803
  • corgiaiCorgiAI (CORGIAI) $ 0.001162
  • zetachainZetaChain (ZETA) $ 1.67
  • rocket-poolRocket Pool (RPL) $ 19.44
  • stader-ethxStader ETHx (ETHX) $ 3,183.40
  • compound-governance-tokenCompound (COMP) $ 57.14

Refund of $70M ‘address poisoning’ scam ongoing, over 50% returned

0 16

Refund of $70M ‘address poisoning’ scam ongoing, over 50% returned

  protos.com 28 m

Refund of $70M ‘address poisoning’ scam ongoing, over 50% returned

The victim of a $70 million ‘address poisoning’ scam is in the process of being refunded, following on-chain negotiations with the perpetrator.

At the time of writing, over half of the funds (14,500 ETH, worth $43.5M) have been returned to the victim’s Ethereum address.

Beginning at around 8AM UTC, almost exactly a week after the initial loss of 1155 WBTC, transactions of between 25 ETH ($75k) and 50 ETH ($150k) began to stream into the victims address. The transfers came directly from the hundreds of addresses into which the attacker had previously dispersed the stolen funds.

Address poisoning is a method scammers use to trick crypto users into sending funds to an address which appears almost identical to one they have interacted with previously.

As crypto security firm SlowMist’s report explains, the attack requires pre-emptively generating thousands of addresses, before monitoring blockchain transactions for potential targets. Scammers then send ‘dust’ transactions (of negligible value) from an address which has matching leading and trailing characters, in order to ‘poison’ the victim’s transfer history.

Refund of $70M ‘address poisoning’ scam ongoing, over 50% returned

Once the trap is set, the attackers rely on the victim accidentally copy-pasting the malicious address from a wallet or block explorer, inadvertently sending funds directly to the scammer.

In this case, once the attack had proved a success, the resulting 1,155 WBTC were swapped to 22,955 ETH, before being layered into hundreds of further addresses.

The day after making their costly error, the victim sent a message to the scammer via Ethereum’s input data messaging system:

“You won bro.
Keep 10% to yourself and get 90% back.
Then we’ll forget about that.
We both know that 7m will definetely make your life better, but 70m won’t let you sleep well.”

The victim kept up the pressure the following day, sending three more messages and setting a deadline for the ‘bounty’ offer.

In SlowMist’s report, published Wednesday, the firm identified previous attacks carried out by the perpetrator as well as an exchange address, OTC desks and IP addresses connected to their activities (though, as SlowMist points out, these may be simply be VPN addresses).

Yesterday, the scammer sent an on-chain message asking for the victims’s Telegram handle along with 50 ETH, seemingly a gesture of good faith. From there, negotiations went off-chain.

Earlier today, the refund process began. Over half of the stolen amount has so far arrived over the course of more than 200 transactions, following the victim’s confirmation of receipt of the first batch.

Source

Leave A Reply

Your email address will not be published.