Ethereum

United

DeFi

ZachXBT

when

<p style="text-align: justify">You can also read this news on BH NEWS: <a href="https://en.bitcoinhaber.net/victim-recovers-stolen-ethereum" data-wpel-link="internal">Victim Recovers Stolen Ethereum</a><br></p>
<p style="text-align: justify">On May 26, a victim who had lost $6.91 million worth of 1,807 liquid-staked Ethereum managed to reclaim a substantial portion of the stolen assets from hackers. Blockchain analysis firm SlowMist’s co-founder Yu Xian disclosed that the Inferno Drainer phishing group used an offline authorization signature to steal nearly $7 million in Ethereum from the user.</p> 
<h2 id="how-did-the-hack-happen">How Did the Hack Happen?</h2> 
<p style="text-align: justify">The incident garnered significant attention when Scam Sniffer revealed that the victim had recovered 1,445 Ethereum, or 80% of the stolen funds, while the scammers kept a 20% reward. Analysts indicated that the breach involved a phishing attack, where a malicious actor used a legitimate off-chain authorization signature to transfer ERC-20 tokens from a wallet that did not belong to them.</p> 
<p style="text-align: justify">According to SlowMist, the attack was made possible due to an overlooked feature in Ethereum permissions introduced by EIP-2612. This EIP allows users to interact with smart contracts without prior authorization, but the permission function can be executed by any account, irrespective of ownership.</p> 
<h2 id="what-are-the-recommendations">What Are the Recommendations?</h2> 
<p style="text-align: justify">During the incident, if users had previously compromised their wallet signatures on phishing websites, scammers could still use the permission attack to drain tokens from their wallets without any approved transactions. To mitigate such risks, SlowMist advised:</p> 
<p style="text-align: justify"><strong>Protecting Your Assets</strong></p> 
<ul> 
 <li>Regularly use authorization tools like RevokeCash to detect abnormal authorizations.</li> 
 <li>Utilize Uniswap’s Permit2 authorization management tool.</li> 
 <li>Immediately revoke any irregular authorizations detected during verification.</li> 
</ul> 
<p style="text-align: justify">Despite these recommendations, not everyone sympathized with the victim. Renowned DeFi detective ZachXBT questioned how someone could fall for phishing attacks amounting to $638,000 last year and $6.9 million this year, suggesting negligence on the victim’s part.</p> 
<p style="text-align: justify">In related <a href="https://newslinker.co" target="_blank" rel="noopener nofollow" data-wpel-link="exclude">news</a>, cryptocurrency-related scams surged by 53% over the past year, with the FBI reporting that cryptocurrency <a href="https://finance.coin-turk.com/" rel="nofollow noopener" target="_blank" data-wpel-link="exclude">investment</a> scams accounted for 86% of all investment losses in the United States in 2023.</p> 
<h5><span style="font-weight:bold;font-size:16px">The post first appeared on BH NEWS: </span> <a href="https://en.bitcoinhaber.net/victim-recovers-stolen-ethereum" data-wpel-link="internal">Victim Recovers Stolen Ethereum</a></h5>

Victim Recovers Stolen Ethereum

Table of Contents

BH NEWS

Other articles published on May 27, 2024

Influential Crypto Figures Targeted in Wave of X Account Hacks Promoting Memecoins

FLOKI skyrockets 21%, What’s behind this surge?

Is Cardano Centralized? KangaMoon Announces New Listing On Coingecko 10X On The Cards?

Nomura and GMO Partner to Explore JPY and USD Stablecoin Issuance in Japan

Top 3 Underrated Altcoins with Huge Potential

Investor AS Menggemari Toncoin, Beda dengan Investor Eropa

Join our free newsletter for daily crypto updates!