Orbit

2024

DeFi

An entity reportedly linked to a cryptocurrency venture capital fund has fallen victim to a major cyberattack,&nbsp;<a style="text-decoration:none" href="https://www.theblock.co/post/320645/35-million-worth-of-tokens-drained-from-a-crypto-whale-in-phishing-attack" rel="noopener noreferrer nofollow">losing $36 million</a> worth of tokens in the process.&nbsp;
<div>
 <blockquote class="twitter-tweet">
 🚨 5 hours ago, someone lost 15,079 fwDETH($35M) after signing a "permit" phishing signature.💸 <a href="https://t.co/YG6KlgWMtv" rel="noopener noreferrer nofollow">pic.twitter.com/YG6KlgWMtv</a>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1844590237521203610?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">October 11, 2024</a>
 </blockquote>
</div>
The victim, whose identity has not been disclosed, unknowingly signed a malicious permit transaction that allowed hackers to drain a large sum of wrapped Ethereum (fwDETH).&nbsp;
&nbsp;
According to blockchain monitoring service&nbsp;<a style="text-decoration:none" href="https://x.com/lookonchain/status/1844597644343283985?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1844597644343283985%7Ctwgr%5E3bf521c6db333f07edd5e68209b5c5dabb2e1fa7%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fcrypto.news%2Fcrypto-vc-fund-tied-entity-losses-36m-by-signing-phishing-permit-transaction-report%2F" rel="noopener noreferrer nofollow">Lookonchain</a>, the attack occurred on October 11, 2024, targeting an on-chain entity believed to be tied to Continue Capital, a well-known crypto venture capital firm.
&nbsp;
The stolen funds, totaling 15,079 fwDETH, were then quickly sold off, causing a dramatic drop in the token’s value. fwDETH's price plummeted by 95% in its trading pair with fwWETH, but has since recovered, remaining down by&nbsp;<a style="text-decoration:none" href="https://dexscreener.com/blast/0x487029635814defe086683a3ae52c1d35e385711" rel="noopener noreferrer nofollow">about 43%</a>.
<h2 id="span-span-how-the-hack-happened-span-span">How the Hack Happened</h2>
According to reports from&nbsp;<a style="text-decoration:none" href="https://x.com/PeckShieldAlert/status/1844596132795777144" rel="noopener noreferrer nofollow">PeckShield</a>, the hackers lured the victim into signing a permit message. This permit message, signed offline by the victim, granted the attacker authorization to drain the victim's wallet without needing any further interaction.
&nbsp;
This type of phishing attack is particularly dangerous because it mimics legitimate requests for user signatures. Once the permit was signed, the attacker drained the funds from the victim’s account and quickly liquidated them on decentralized exchanges, causing a major drop in the token’s value.
&nbsp;
Having received $12.8K in fwDETH, the scammer address exchanged 11,826 $DETH for 1,172.8 $ETH (worth $2.8M). Further, it swapped 2,261 fwDETH for 1,114.4 ETH (worth ~$2.7M), according to PeckShield.
&nbsp;
The sharp decline in fwDETH's price also triggered problems for other DeFi protocols. PAC Finance and Orbit Finance, both of which rely on wrapped Ethereum tokens, were reportedly affected by the sudden drop in value.&nbsp;
<h2 id="span-span-growing-threat-of-phishing-in-crypto-span-span">Growing Threat of Phishing in Crypto</h2>
Phishing attacks like this one are becoming more common and sophisticated. Hackers often disguise their malicious activities as legitimate requests for permissions, preying on the fast-paced nature of cryptocurrency trading, where users are constantly prompted to sign transactions or approve requests.
&nbsp;
According to&nbsp;<a style="text-decoration:none" href="https://blockchaingroup.io/top-10-crypto-losses-of-2024-hacks-frauds-and-exploits/#:~:text=Phishing%20Scams%20Prevail%20And%20Cause,million%20stolen%20across%20150%20incidents." rel="noopener noreferrer nofollow">Certik’s 2024 blockchain security report</a>, phishing is now one of the leading causes of financial loss in the crypto space. In the first half of 2024 alone, $498 million was stolen across 150 incidents due to phishing.&nbsp;
&nbsp;
In September 2024,10,800 victims were impacted by phishing attacks, according to Scam Sniffer. The largest attack that month saw&nbsp;<a style="text-decoration:none" href="https://x.com/realScamSniffer/status/1839923975184625832" rel="noopener noreferrer nofollow">$32.43 million</a> worth of spWETH stolen through a phishing permit signature, similar to the attack that drained fwDETH in this latest incident.

Crypto VC-Linked Entity Loses $36M to Phishing Attack - Report

Table of Contents

BSCN

Other articles published on Oct 18, 2024

Join our free newsletter for daily crypto updates!