#Phishing Attack Victim Loses $908K After 15-Month Dormant Scam
A crypto user lost $908,551 worth of
$USDC in a sophisticated phishing attack that waited 458 days to execute.
The scammer obtained wallet permissions through a malicious approval transaction signed in April 2024, then patiently monitored the account.
The attack was triggered after the victim deposited $762,397 and $146,154 in separate transactions during July 2025.
The delay demonstrates how #phishing approval attacks work, with scammers waiting months until wallet balances justify the gas costs.
The attacker was linked to the notorious
Security experts recommend regularly reviewing and revoking old token approvals using tools like #Etherscan's Token Approval Checker.
Bad actors stole over $142 million from the crypto space in July across at least 17 separate attacks.
