Safe

Cryptocurrency

Security

<p>Cryptocurrency enthusiasts find themselves increasingly at risk as a sophisticated hacker exploits a technique known as “address poisoning,” resulting in cumulative losses exceeding $5 million over the past four months. The attacker, identified as the same individual responsible for a recent high-profile attack on Florence Finance, has escalated <a href="https://dune.com/scamsniffer/address-poisoning-attack" rel="noopener noreferrer nofollow" target="_blank">activities</a> against Safe Wallet users. In the last week alone, approximately ten Safe Wallets fell victim to this method, resulting in losses exceeding $2 million and bringing the total count of victims to 21.</p>
<h2 class="wp-block-heading" id="hackers-siphon-funds-from-ten-safe-wallet-users">Hackers siphon funds from ten Safe Wallet users</h2>
<p>Address poisoning is a cyber threat tactic where the perpetrator generates a counterfeit address resembling one that the targeted victim frequently uses. Typically, the fraudulent address shares similar starting and ending characters. The hacker initiates a small cryptocurrency transfer from the fabricated wallet to the victim’s account, effectively “poisoning” their transaction history. Consequently, an unsuspecting victim may unintentionally copy the false address from their transaction history, leading to funds being sent to the hacker’s wallet instead of the intended recipient.</p>
<p>Data compiled by Scam Sniffer from Dune Analytics reveals that the same hacker has utilized this method to pilfer at least $5 million from 21 victims within the last four months. Notably, one victim held $10 million in cryptocurrency within a Safe Wallet but incurred a loss of $400,000, emphasizing the severity of the threat. The hacker’s tactics extend beyond targeting Safe Wallets, as demonstrated by an attack on November 30 against Florence Finance, resulting in a $1.45 million loss.</p>
<h2 class="wp-block-heading" id="exploiting-the-vulnerabilities-in-the-crypto-space">Exploiting the vulnerabilities in the crypto space</h2>
<p>Blockchain security firm PeckShield shed light on the attacker’s ability to deceive the protocol by utilizing addresses with identical prefixes and suffixes, mirroring the address poisoning methodology observed in other attacks. Address poisoning is compounded by the exploitation of Ethereum’s ‘Create2’ Solidity function, a vulnerability first reported by Scam Sniffer in November. Hackers leverage ‘Create2’ to bypass wallet security alerts, facilitating the theft of approximately $60 million from nearly 100,000 victims over six months.</p>
<p>Create2 pre-calculates contract addresses, enabling malicious actors to generate new addresses that closely resemble those of their victims. Once the victim unknowingly authorizes a forged signature or transfer request, the imposter addresses are deployed, resulting in significant financial losses. Security experts at SlowMist reported that a group has been leveraging the Create2 function since August, stealing nearly $3 million in assets from 11 victims. In one case, a victim suffered losses of up to $1.6 million.</p>
<p>The ongoing exploitation of Create2 underscores the critical need for enhanced security measures within the cryptocurrency space. As the hacker’s proficiency in address poisoning attacks continues to evolve, <a href="https://www.cryptopolitan.com/crypto-com-uk-financial-authoritys-approval/" data-type="post" data-id="415004" rel="noopener noreferrer nofollow">cryptocurrency</a> users must remain vigilant. Adhering to best practices, such as verifying transaction details and utilizing secure wallets, becomes paramount in mitigating the risk of falling victim to these increasingly sophisticated attacks. Furthermore, collaboration within the cryptocurrency community is imperative for developing and implementing robust security protocols. These measures will help to safeguard users against evolving threats in the dynamic digital asset landscape.</p>

Safe wallet users lost $2 million to scammers in one week

Table of Contents

Cryptopolitan_News

Other articles published on Dec 4, 2023

Platypus hacker Cleared in 8.5Million Dollar DeFi Theft

Singapore Unveils Ambitious Plan to Boost AI Talent and Innovation

Envision Joins Hands With HBAR Foundation in Latest Move to Digitize Carbon Markets

IOTA: A Glimpse Into The Future Beyond Blockchains

Crypto Analyst Predicts Bitcoin 400% Surge To $200,000, Here’s When

Ethereum Breaks Through $2,200 Ceiling, Investors Expect $3,000 This Week

Join our free newsletter for daily crypto updates!