Ethereum

Swap

<![CDATA[<figure class="image"><img src="https://cimg.co/news/124666/329296/phone-hack.jpg" alt="" srcset="https://cimg.co/news/124666/329296/responsive-images/phone-hack___media_library_original_612_408.jpg 612w, https://cimg.co/news/124666/329296/responsive-images/phone-hack___media_library_original_600_400.jpg 600w, https://cimg.co/news/124666/329296/responsive-images/phone-hack___media_library_original_300_200.jpg 300w" sizes="100vw" width="612" class="content-img"><figcaption>Source: iStock / Xijian</figcaption></figure><a href="https://cryptonews.com/coins/ethereum/">Ethereum</a> co-founder Vitalik Buterin revealed that his recent <a href="https://cryptonews.com/news/ethereum-founder-vitalik-buterin-falls-victim-twitter-hack-beware-of-shared-links.htm">Twitter (X) account hack</a>, that wiped over $691,000 victims&rsquo; funds in a fake NFT promo, was a result of a &ldquo;SIM swap&rdquo; attack.Blockchain analyst ZachXBT, which confirmed &nbsp;<a href="https://twitter.com/zachxbt/status/1700650151298089374">$691,000 had been drained</a>&nbsp;from people's wallets, declined to speculate whether Buterin was the victim of a &ldquo;SIM swap.&rdquo; The reply came as an X user, Satoshi 767, assumed that the hack could be a SIM Swap attack.<figure class="media"><oembed url="https://twitter.com/zachxbt/status/1700662788371210610?s=20"></oembed></figure>Essentially, SIM swapping occurs when a SIM scammer gains control of a phone number by assuming the victim&rsquo;s identity and persuading their mobile service provider. Once they have control over this, they pass any SMS-based two-factor authentication (2FA) processes for accounts associated with that number, gaining complete control.<h2 style="text-align:justify;" id="buterin-confirms-sim-swap">Buterin Confirms &lsquo;SIM Swap&rsquo;</h2>In a post on the decentralized social media Warpcast, Buterin revealed that someone &ldquo;socially-engineered&rdquo; his Twitter mobile taking control of his phone number.<figure class="image"><img src="https://cimg.co/news/124666/329300/buterin.jpg" alt="" srcset="https://cimg.co/news/124666/329300/responsive-images/buterin___media_library_original_773_231.jpg 773w, https://cimg.co/news/124666/329300/responsive-images/buterin___media_library_original_720_215.jpg 720w, https://cimg.co/news/124666/329300/responsive-images/buterin___media_library_original_600_179.jpg 600w, https://cimg.co/news/124666/329300/responsive-images/buterin___media_library_original_300_90.jpg 300w" width="773" class="content-img"><figcaption>Source: Warpcast</figcaption></figure><blockquote>&ldquo;I had seen the &lsquo;phone numbers are insecure, don't authenticate with them&rsquo; advice before, but did not realize this.&rdquo;</blockquote>He said that the hack taught him to completely remove phone numbers from Twitter. A phone number is &ldquo;sufficient to password reset a Twitter account even if not used as 2FA,&rdquo; he added.<blockquote>&ldquo;I don't remember when I *added* the number; my guess is that it was required to sign up for Twitter Blue.&rdquo;</blockquote>Twitter&rsquo;s terms were updated in December 2022, which reflected that a verified phone number is required for a Twitter Blue subscription. If a user is not yet a Blue subscriber and hasn&rsquo;t verified a phone number, the user will be prompted to verify a number when proceeding to sign up.<figure class="image"><img src="https://cimg.co/news/124666/329299/twitter-blue.jpg" alt="" srcset="https://cimg.co/news/124666/329299/responsive-images/twitter-blue___media_library_original_1242_317.jpg 1242w, https://cimg.co/news/124666/329299/responsive-images/twitter-blue___media_library_original_1200_306.jpg 1200w, https://cimg.co/news/124666/329299/responsive-images/twitter-blue___media_library_original_900_230.jpg 900w, https://cimg.co/news/124666/329299/responsive-images/twitter-blue___media_library_original_720_184.jpg 720w, https://cimg.co/news/124666/329299/responsive-images/twitter-blue___media_library_original_600_153.jpg 600w, https://cimg.co/news/124666/329299/responsive-images/twitter-blue___media_library_original_300_77.jpg 300w" sizes="100vw" width="1242" class="content-img"><figcaption>Source: Twitter</figcaption></figure>&ldquo;Anyway, glad to be on Farcaster, where my account recovery can be controlled by a good wholesome Ethereum address :),&rdquo; Buterin said, after gaining control of his account.<h2 style="text-align:justify;" id="sim-swap-isnt-new">SIM Swap Isn&rsquo;t New</h2>SIM swap attacks have had a long history in the recent past in the crypto sector. The&nbsp;<a href="https://www.fbi.gov/contact-us/field-offices/phoenix/news/press-releases/fbi-tech-tuesday-sim-swapping">Federal Bureau of Investigations</a> issued a warning in 2022 on the increasing SIM swap attacks that specifically targeted victims who were likely to own large amounts of cryptocurrency.Per the FBI estimates,&nbsp;<a href="https://www.ic3.gov/Media/PDF/AnnualReport/2022_IC3Report.pdf">$72 million</a>&nbsp;was stolen in SIM-swap attacks last year, up from&nbsp;<a href="https://www.ic3.gov/Media/Y2022/PSA220208">$68 million</a>&nbsp;in 2021.Last month, Bart Stephens, managing partner of Blockchain Capital, <a href="https://www.forbes.com/sites/iainmartin/2023/08/21/blockchain-capitals-bart-stephens-lost-63-million-in-sim-swap-crypto-hack/?sh=1a3780eaf74c">claimed</a> that he fell victim to a $6.3 million crypto hack resulting from a SIM-swap attack. The hacker allegedly stole <a href="https://cryptonews.com/guides/bitcoin/">Bitcoin</a> (BTC), Ether (ETH) and other cryptocurrencies from his digital wallets.Stephens has also backed influential crypto ventures like Worldcoin, Coinbase, and Kraken.In yet another SIM swap heist, LayerZero CEO Bryan Pellegrino confirmed in early July, that hackers took over his Twitter account briefly.<figure class="media"><oembed url="https://twitter.com/PrimordialAA/status/1676726399955251202"></oembed></figure>&ldquo;Checked my phone and saw SOS status and realized it had been a sim swap,&rdquo; Pellegrino wrote. &ldquo;Lesson for me is that I need to be exceptionally careful about these things.&rdquo;
]]>

Vitalik Buterin Discloses Twitter SIM Swap Attack That Drained $691K From Users’ Wallets

Table of Contents

Cryptonews.com

Other articles published on Sep 12, 2023

Bitcoin vs. XRP: The Path to Becoming a Millionaire

The Recent Plunge in Ethereum’s Price Indicates a Potential Market Reversal – Santiment

Bankrupt Celsius Founder Alex Mashinsky Asks Court to Dismiss US FTC Case

LayerZero x Holograph AIRDROP Guide: Create and Bridge Multichain NFTs

Five Arrested in Thailand for Alleged Involvement in $76M Crypto Scam

Why are Cryptos UP? Well, it has to do with Grayscale…

Join our free newsletter for daily crypto updates!