Ethereum

Uniswap

DeFi

ZachXBT

<p style="text-align: justify">You can also read this news on COINTURK NEWS: <a href="https://en.coin-turk.com/victim-recovers-most-of-stolen-ethereum-from-hackers/" data-wpel-link="internal">Victim Recovers Most of Stolen Ethereum from Hackers</a><br></p>
<p class="p1" style="text-align: justify">On May 26, the unfortunate victim who lost $6.91 million worth of 1,807 liquid staked <a href="https://en.coin-turk.com/sec-decides-on-ethereum-etfs-this-week/" data-wpel-link="internal">Ethereum</a> seems to have recovered a significant portion of the stolen funds from the scammers. Blockchain analysis firm SlowMist’s co-founder Yu Xian revealed that the former phishing group Inferno Drainer used an offline authorization signature to seize approximately $7 million worth of Ethereum from a user.</p> 
<h2 class="p1" style="text-align: justify" id="hack-attack-drew-attention">Hack Attack Drew Attention</h2> 
<p class="p1" style="text-align: justify">Recently, Scam Sniffer posted on X that the victim recovered 1,445 Ethereum or 80% of the stolen funds after the scammers allegedly kept a 20% reward. Analysts claimed that the wallet address involved in the breach was subjected to a phishing attack where a malicious actor created a legitimate off-chain authorization signature to transfer ERC-20 tokens from a wallet that didn’t belong to them.</p> 
<p class="p1" style="text-align: justify">According to SlowMist, the attack was executable due to an overlooked feature in Ethereum permissions introduced via EIP-2612. The EIP allows users to interact with smart contracts without prior authorization by adding an authorization signature. However, the permission function can be executed by any account regardless of ownership.</p> 
<p><img loading="lazy" loading="lazy" decoding="async" class="aligncenter wp-image-356320 size-full" src="https://coin-turk.com/wp-content/uploads/2024/05/scam.jpg" alt="" width="1962" height="1174"></p> 
<h2 class="p1" style="text-align: justify" id="recommendations-for-hack-attacks-followed">Recommendations for Hack Attacks Followed</h2> 
<p class="p1" style="text-align: justify">During this process, if users had previously compromised their wallet signatures on phishing websites, scammers could still use the permission attack to take tokens from their wallets even if no transaction was approved. To protect against such attacks, SlowMist recommended:</p> 
<blockquote> 
 <p class="p1" style="text-align: justify">“It is recommended to periodically use authorization tools like RevokeCash to detect abnormal authorizations. The Uniswap Permit2 authorization management tool can also be used. If any irregular authorization is detected during verification, it is crucial to revoke them immediately.”</p> 
</blockquote> 
<p class="p1" style="text-align: justify">However, not everyone sided with the victim in this incident. Renowned DeFi detective ZachXBT shared the following statements on the matter:</p> 
<blockquote> 
 <p class="p1" style="text-align: justify">“How do you fall for a phishing attack for $638,000 last year and $6.9 million this year? Some people are careless with their assets.”</p> 
</blockquote> 
<p class="p1" style="text-align: justify">According to <a href="https://newslinker.co" target="_blank" rel="noopener" data-wpel-link="exclude">news</a> that surfaced in March, cryptocurrency-related scams increased by 53% over the past year. According to the FBI, cryptocurrency <a href="https://finance.coin-turk.com/" data-wpel-link="exclude">investment</a> scams accounted for 86% of all investment losses in the United States in 2023.</p> 
<h5><span style="font-weight:bold;font-size:16px">The post first appeared on COINTURK NEWS: </span> <a href="https://en.coin-turk.com/victim-recovers-most-of-stolen-ethereum-from-hackers/" data-wpel-link="internal">Victim Recovers Most of Stolen Ethereum from Hackers</a></h5>

Victim Recovers Most of Stolen Ethereum from Hackers

目次

COINTURK NEWS

2024年5月27日公開の他の記事

Multipool Sells Out Fjord Foundry LBP

JasmyCoin, ENA, And LDO Price Prediction: Hints A Bull Run!

How to buy Ether (ETH) on eToro

ETF Approval Speculation Grows, These ERC20 Memecoins Could Go Parabolic

Bitcoin to face altcoin onslaught? Here’s what to expect in June

Memecoin team connected to GCR hack, reveals ZachXBT

ニュースレターを購読して暗号資産の最新情報を毎日入手！