Ethereum

Lido Staked ETH

Rocket Pool ETH

Rocket Pool

Rocket

<div class="sg-post-des">
 A significant portion of the stolen funds has been transferred into the fully automatic cryptocurrency exchange FixedFloat. 
</div> 
<div class="cointelegraph"> 
 A cryptocurrency <a rel="noopener noreferrer nofollow" title="whale" href="https://thebittimes.com/tag/whale.html">whale</a> has fallen victim to a massive <a rel="noopener noreferrer nofollow" title="phishing" href="https://thebittimes.com/tag/phishing.html">phishing</a> <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>, losing millions of dollars in <a rel="noopener noreferrer nofollow" title="staked" href="https://thebittimes.com/tag/staked.html">staked</a> Ethereum on the liquid staking provider Rocket Pool. 
 A large cryptocurrency investor lost the entire address balance of Lido Staked ETH (stETH) and Rocket Pool ETH (rETH) due to a <a rel="noopener noreferrer nofollow" title="phishing" href="https://thebittimes.com/tag/phishing.html">phishing</a> <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>, the cryptocurrency security firm PeckShield reported. 
 The hack was completed in just two transactions, as one had 9,579 stETH stolen and the other involved 4,851 rETH.&nbsp;At the time of the <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>, which occurred on Sept. 6, the stolen amounts were worth $15.5 million in stETH and $8.5 million in rETH, a staggering $24 million combined. 
 <figure> 
 <img src="https://cdn.thebittimes.com/images/2023/09/07/526e98a9eb28c8da31b20c4f8b7a0df3.webp"> 
 <figcaption style="text-align: center;"> The phisher transactions in the $24 million phishing hack. Source: X 
 </figcaption> 
 </figure> 
 According to PeckShield data, the phisher subsequently swapped the stolen assets for 13,785 Ether (ETH) and 1.64 million Dai (DAI) tokens. 
 A significant portion of the DAI stash has already been transferred into the fully automatic cryptocurrency exchange FixedFloat, PeckShield reported. 
 SlowMist’s crypto tracking team MistTrack also reported that the most of the remaining stolen funds were transferred to three addresses, including 0x4f2f02ee, 0x7023505 and 0x2abdc2ab. 
 Related: MetaMask scammers take over government websites to target crypto investors 
 According to data from the anti-scam source, Scam Sniffer, the victim enabled token approvals to the scammer by signing “Increase Allowance” transactions. 
 <figure> 
 <img src="https://cdn.thebittimes.com/images/2023/09/07/2f4b3c65f23cbde696e5a9f825e54dbc.webp"> 
 <figcaption style="text-align: center;"> “Increase Allowance” method on the phisher’s transaction. Source: Etherscan 
 </figcaption> 
 </figure> 
 Allowance or access permissions are a feature of ERC-20 tokens which enable a third party to have the right to spend some tokens that belong to a different owner, using smart contracts. Some cryptocurrency observers have previously warned against risks associated with approving ERC-20 allowances, noting that anonymous developers could deploy malicious smart contracts to scam users. 
 The news comes soon after at least five Ethereum liquid staking providers imposed or started working to impose a self-limit rule in which they promise not to own more than 22% of the Ethereum staking market. The providers reportedly included Rocket Pool, StakeWise, Stader Labs and Diva Staking. 
 Magazine: Asia Express: Thailand’s national airdrop, Delio users screwed, Vietnam top crypto country 
 <template data-name="subscription_form" data-type="crypto_biz"></template> 
</div> 
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/crypto-whale-loses-24m-in-staked-ethereum-to-phishing-attack-tbt61898.html">https://thebittimes.com/crypto-whale-loses-24m-in-staked-ethereum-to-phishing-attack-tbt61898.html</a>

Crypto whale loses $24M in staked Ethereum to phishing attack

TheBitTimes

Other articles published on Sep 7, 2023

OpenSea ex-manager retracts bail request amid ongoing appeal

Ethereum Whales Engage in a $425 Million Shopping Spree, Signaling Optimism

XRP Lawyers, Ripple Exec On The Outcome Of US SEC Lawsuit

Former FTX executive will reportedly plead guilty to criminal charges

Ethereum WASM enhanced with Stylus as Chainlink and SWIFT partner, Borroe.Finance surges 25%

ICP’s Bullish Surge Faces Strong Resistance as Momentum Fades

Join our free newsletter for daily crypto updates!