2024

<div class="cryptonews">
 <p class="is-style-lead">An unknown user lost $4.2 million worth of aEthWETH and aEthUNI tokens on Jan. 22.</p>
 <p>According to an X crypto researcher under the handle @realscamsniffer, an unidentified person has lost aEthWETH and aEthUNI amounting to $4.2 million after verifying transactions with a falsified ERC-20 permission signature.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">insane! someone lost $4.20m worth of aEthWETH and aEthUNI to crypto <a rel="noopener noreferrer nofollow" title="phishing" href="https://thebittimes.com/tag/phishing.html">phishing</a> about 40 minutes ago!https://t.co/PqtYbfjrW5 pic.twitter.com/2Nhx4HDQcK</p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) January 22, 2024
   </blockquote>
  </div>
 </figure>
 <p>The victim signed approvals for several transactions with an ERC-20 authorization that used an opcode contract to bypass security warnings that created new addresses for each signature before the transaction had been executed, which redirected victims’ funds from the victim to the new unauthorized address.</p>
 <p>Opcode malware in the context of cryptocurrency hacks refers to <a rel="noopener noreferrer nofollow" title="malicious" href="https://thebittimes.com/tag/malicious.html">malicious</a> software that exploits the operation codes used in the scripting languages of various cryptocurrency platforms. For instance, they could redirect cryptocurrency to the attacker’s address, allow the attacker to spend other users’ funds, or freeze assets within a smart contract.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">victim:<br>0x1749ad951fb612b42dc105944da86c362a783487<br><br>scammers:<br>0x0000372B2BC916D6c904495e53533Ae90740F688<br>0xf672775e124E66f8cC3FB584ed739120d32bBaad</p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) January 22, 2024
   </blockquote>
  </div>
 </figure>
 <p>The X user warned that traders must be cautious when signing and approving transactions, paying particular attention to warnings from Web3 wallet apps. Additionally, researchers advocate a process known as do your own research, or DYOR, when it comes to all things crypto, which means taking responsibility and knowledge about forms of <a rel="noopener noreferrer nofollow" title="phishing" href="https://thebittimes.com/tag/phishing.html">phishing</a> and scams of all shapes and stripes.</p>
 <p>In November 2023, a Uniswap user who created a liquidity pool lost more than $700,000 in seconds after an influx of MEV bots, likely due to a configuration error. The transaction attracted the attention of MEV bots, which was focused on maximizing profits by shuffling transactions in a block.</p>
 <p>According to an annual report by the crypto <a rel="noopener noreferrer nofollow" title="sleuth" href="https://thebittimes.com/tag/sleuth.html">sleuth</a> @realscamsniffer, users lost almost $295 million to <a rel="noopener noreferrer nofollow" title="phishing" href="https://thebittimes.com/tag/phishing.html">phishing</a> attacks in 2023, with <a rel="noopener noreferrer nofollow" title="phishing" href="https://thebittimes.com/tag/phishing.html">phishing</a> taking the cake as the most commonly used form of scam by hackers in the space.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Pastor dupes investors out of $1.3m in crypto-selling scam
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/web3-anti-scam-sleuth-uncovers-phishing-attack-that-drained-4-2m-using-a-malicious-opcode-tbt77260.html">https://thebittimes.com/web3-anti-scam-sleuth-uncovers-phishing-attack-that-drained-4-2m-using-a-malicious-opcode-tbt77260.html</a></p>

Web3 anti-scam sleuth uncovers phishing attack that drained $4.2m using a malicious opcode

TheBitTimes

Other articles published on Jan 22, 2024

Will Coinbase prevail amidst regulatory scrutiny?

Terra Luna Classic (LUNC) Delisting Confirmed By CryptoCom

Shiba Inu’s Intriguing $3.87 Million Transfer Sparks Market Speculation

Ripple: How Much XRP Do You Need to Make $1M, $10M if Price Hits $8.54?

LUNA Loses Classic Shine: -7% Plunge Follows Terraform’s Chapter 11 Filing

Solana Price Prediction: Can SOL Outperform ETH Amid Crypto Market Doldrums?

Join our free newsletter for daily crypto updates!