Safe

2024

Connect

<a href="https://bitcoinworld.co.in/angel-drainer-stole-403k-from-victim-using-malicious-safe-contract/" title="Angel Drainer Stole $403K From Victim Using Malicious Safe Contract" rel="noopener noreferrer nofollow"></a>
Notorious phishing group, Angel Drainer, has reportedly stolen over $400,000 from victim’s 128 crypto wallets through a new attack vector, using a malicious Safe Contract.
The attack leveraged Etherscan’s verification tool to cover up the malicious nature of a smart contract.
The attack started at 6:40 am Feb. 12 when Angel Drainer deployed a malicious Safe (formerly Gnosis Safe) vault contract, wrote blockchain security firm Blockaid in a Feb. 13 <a href="https://twitter.com/blockaid_/status/1757469197960196322" rel="noopener noreferrer nofollow">post</a> to X.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Today our researchers discovered yet another emerging attack vector from the Angel Drainer group — this time phishing users and leading them to a single Safe Vault contract where 128 wallets have been drained of $403k+ so far. All Blockaid-protected users are safe. <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f9f5.png" alt="🧵" class="wp-smiley" style="height: 1em; max-height: 1em;"> <a href="https://t.co/niffQDlciG" rel="noopener noreferrer nofollow">pic.twitter.com/niffQDlciG</a>
 — Blockaid (@blockaid_) <a href="https://twitter.com/blockaid_/status/1757469196236243294?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">February 13, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
A total of 128 wallets then signed a “Permit2” transaction on the Safe vault contract, leading to $403,000 in funds being stolen.
Blockaid said the scammers used a Safe vault contract specifically to deliver a “false sense of security,” as Etherscan automatically adds a verification flag to confirm it as a legitimate contract.
Blockaid stressed the incident wasn’t a direct attack on Safe and that its user base had not been “broadly impacted.” The security firm added it had notified Safe of the attack and was working to limit further damage.
See Also: <a class="row-title" href="https://bitcoinworld.co.in/crypto-gaming-platform-playdapp-lost-290-million-worth-of-pla-tokens-in-two-hack-exploits/" aria-label="“Crypto Gaming Platform PlayDapp Lost $290 Million Worth Of PLA Tokens In Two Hack Exploits” (Edit)" rel="noopener noreferrer nofollow">Crypto Gaming Platform PlayDapp Lost $290 Million Worth Of PLA Tokens In Two Hack Exploits</a>
“This is not an attack on Safe […] rather they decided to use this Safe vault contract because Etherscan automatically adds a verification flag to Safe contracts, which can provide a false sense of security as it’s unrelated to validating whether or not the contract is malicious.”
Angel Drainer has only been in operation for 12 months but has managed to drain over $25 million from nearly 35,000 wallets, Blockaid stated in a Feb. 5 post X.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Today, the Angel Drainer Group celebrated one year in operation.
 They've drained over $25M from nearly 35k wallets and are behind high profile drains like last year's Ledger Connect Kit and last week's Restake Farming attack.
 We seek to protect every web3 user and put them out… <a href="https://t.co/U1Sg6sajd6" rel="noopener noreferrer nofollow">pic.twitter.com/U1Sg6sajd6</a>
 — Blockaid (@blockaid_) <a href="https://twitter.com/blockaid_/status/1754589237956292786?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">February 5, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
The $484,000 Ledger Connect Kit hack and the Eigenlayer restake farming attack are among the most notable attacks committed by Angel Drainer in recent months.
The restake farming attack involved Angel Drainer implementing a malicious queueWithdrawal function which, once signed by users, would withdraw staking rewards to an address of the attacker’s choosing, Blockaid explained.
“Because this is a new kind of approval method, most security providers or internal security tooling does not parse and validate this approval type. So in most cases it’s marked as a benign transaction.”
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 (4/6)How does the attack work?
 Central to the attack, a user signing a 'queueWithdrawal' transaction effectively approves a malicious 'withdrawer' to withdraw the wallet’s staking rewards from the EigenLayer protocol to an address of the attacker’s choosing. Unlike the regular…
 — Blockaid (@blockaid_) <a href="https://twitter.com/blockaid_/status/1752847520450121801?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">February 1, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
Approximately 40,000 users on OpenSea, Optimism, zkSync, Manta Network, and SatoshiVM fell victim to phishing attacks in January, losing a combined $55 million, <a href="https://twitter.com/realScamSniffer/status/1755855792933368250" rel="noopener noreferrer nofollow">according</a> to Scam Sniffer, a Web3 scam tracker.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> ScamSniffer's January Phishing Report <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f9f5.png" alt="🧵" class="wp-smiley" style="height: 1em; max-height: 1em;"> 1/6
 in January, over $55M was stolen in phishing scams across EVM chains. Top 7 victims lost $17M! <a href="https://t.co/Fq0tulYkVB" rel="noopener noreferrer nofollow">pic.twitter.com/Fq0tulYkVB</a>
 — Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1755855792933368250?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">February 9, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
The figure is on track to surpass 2023’s figure of $295 million, according to Scam Sniffer’s 2023 Wallet Drainers Report.
#Binance #WRITE2EARN
The post <a href="https://bitcoinworld.co.in/angel-drainer-stole-403k-from-victim-using-malicious-safe-contract/" rel="noopener noreferrer nofollow">Angel Drainer Stole $403K From Victim Using Malicious Safe Contract</a> appeared first on <a href="https://bitcoinworld.co.in" rel="noopener noreferrer nofollow">BitcoinWorld</a>.

Angel Drainer Stole $403K From Victim Using Malicious Safe Contract

ItsBitcoinWorld

Άλλα άρθρα που δημοσιεύτηκαν στις 14 Φεβ 2024

Bitcoin hits mind-blowing milestone – soars past $1 trillion market cap

Bitcoin ETFs Surge With $631 Million Inflows in 24 Hours: Details Inside

Cryptocurrency-related crimes increased dramatically in South Korea in 2023!

Bitcoin breaches $1 trillion market cap

Lamborghini And VeVe Set To Launch A New NFT Car Collection This Week

African startups raised $74m in January

Join our free newsletter for daily crypto updates!