Ethereum

Rocket

when

Million

Tornado

In a notable development within the cryptocurrency security landscape, a blockchain security firm, <a href="https://www.certik.com/" data-wpel-link="external" target="_blank" rel="nofollow external noreferrer">CertiK</a>, reported on March 21 that an account implicated in a major phishing scam in September 2023 has recently transferred $10 million worth of Ether to Tornado Cash, a crypto-mixing protocol. 
This account was part of a larger hack totaling $24 million, originating from an attack on a significant cryptocurrency investor, or “crypto whale,” on September 6, 2023. 
The victim of this phishing attack lost a substantial amount of staked Ether (ETH) through the liquid staking provider Rocket Pool. 
The attackers managed to siphon funds in two separate transactions, extracting 9,579 stETH and 4,851 rETH respectively. 
According to Scam Sniffer, an anti-scam initiative, the breach occurred when the victim approved an “Increase Allowance” transaction, inadvertently granting the hackers permission to access their ERC-20 tokens via a token allowance mechanism—a feature that enables third parties to spend tokens on behalf of the token holder. 
The conversation around token allowances has been prominent within the cryptocurrency community, with many voicing concerns over the potential for misuse through the deployment of malicious smart contracts. 
Further investigation by another blockchain security firm, PeckShield, revealed that the fraudsters converted their illicit gains into 13,785 ETH and 1.64 million Dai, dispersing a portion of these funds through the FixedFload exchange and other digital wallets. 
READ MORE: <a href="https://www.cryptointelligence.co.uk/sbfs-legal-team-calls-50-year-sentence-proposal-medieval-advocates-for-leniency-in-high-profile-crypto-case/" data-wpel-link="internal">SBF’s Legal Team Calls 50-Year Sentence Proposal ‘Medieval’, Advocates for Leniency in High-Profile Crypto Case</a> 
This incident underscores the persistent risk of phishing scams in the cryptocurrency domain, which continue to result in significant financial losses. 
A recent report by Scam Sniffer highlighted that nearly $47 million was stolen through crypto phishing in February alone, with the majority of these incidents occurring on the Ethereum network and primarily involving ERC-20 tokens. 
Moreover, token approvals emerged as a focal point of vulnerability once again on March 20, when an outdated contract from the Dolomite exchange was exploited to withdraw $1.8 million from unsuspecting users. 
This incident prompted Dolomite’s developers to advise users to revoke any permissions granted to the compromised contract address. 
While the cryptocurrency community has seen its share of successful security interventions, such as the Layerswap team’s quick response to a breach on March 20, preventing further losses after hackers had already extracted about $100,000 from 50 users, these episodes serve as a stark reminder of the ongoing challenges and risks associated with digital asset security. 
To submit a <a href="https://www.cryptointelligence.co.uk/category/press-releases/" data-wpel-link="internal">crypto press release (PR)</a>, send an email to <a href="mailto:sales@cryptointelligence.co.uk">sales@cryptointelligence.co.uk</a>.

$10 Million in Stolen Ether Moved to Crypto Mixer in Aftermath of Phishing Attack

Crypto Intelligence

Other articles published on Mar 29, 2024

Binance and WTech Collaborate to Enhance Tech Literacy Among Women in Crisis Zones

Facing Bitcoin's Potential Fall: 3 Altcoins Poised for Growth

BlockDAG Commands the Crypto Scene With Nearly $9.9M in Presales, Outpacing Sui and Kelexo

Bitcoin and Altcoins: Price Predictions and Market Analysis

Crypto Gains Insights on the Hottest Meme Coin Launching Soon – Dogecoin20 Presale Review

CHZ Coin Climbs as Bitcoin Whales Make Strategic Moves

Join our free newsletter for daily crypto updates!