Investor loses over $100k to crypto phishing scam

As an experienced analyst, I cannot help but feel a sense of dismay and frustration upon learning about yet another devastating phishing attack in the cryptocurrency space. This time, an unsuspecting investor lost over $101,000 in various cryptocurrencies across multiple blockchains.


A unfortunate investor recently suffered significant losses after being tricked into divulging sensitive information in a phishing scam, resulting in the theft of over $101,000 worth of cryptocurrencies spread across various blockchains.

Based on the findings of cybersecurity company PeckShield, an Osaka Protocol address suffered a loss of approximately 237.8 billion OSAK tokens, equivalent to around $66,682, and 287 billion CAW tokens, worth roughly $26,490 in DEFi project funds.

ZeroxA71d…4541 was unfortunately tricked into a phishing scam by the deceitful entity, Fake_Phishing187019. As a consequence, approximately $101,000 in cryptocurrencies were stolen, consisting of 237,800 OSAK, 287,100 CAW, 213 HIGH, and 426 USDT on Ethereum, as well as 3,000 kUSDC on BNB Smart Chain. Additionally, around 0.5 PENDLE-LPT was taken from the victim’s wallet.— PeckShieldAlert (@PeckShieldAlert) May 20, 2024

As a crypto investor, I’ve recently encountered an unfortunate incident where hackers managed to steal some of my assets. Specifically, they took hold of 213 HIGH tokens worth approximately $938 and 426 USDT on the Ethereum network. Additionally, they snatched away 3,000 USDC on the BNB Chain, along with 0.5 PENDLE and 0.1 WBTC tokens on Arbitrum. At this moment, the wallet address still retains approximately $7,000 worth of crypto assets.

At the latest examination, the culprit’s wallet holds the pilfered assets, showcasing approximately $220,000 in total value spread across different blockchains. The perpetrators orchestrated their heist by utilizing a multi-call feature, enabling them to trigger multiple smart contract functions within a singular transaction.

Malicious hackers take advantage of this vulnerability by deceiving users into approving seemingly harmless transactions containing hidden, harmful multi-call functions. These functions enable the ill-intended actor to move funds or manipulate contracts without the user’s awareness or approval, resulting in unwanted asset transfers.

As a crypto analyst, I’ve noticed that this year, the crypto industry has witnessed a decrease in frequency but not a disappearance of phishing attacks. Regrettably, just recently, an anonymous market participant suffered a significant loss of approximately $674,000 worth of USDC due to one such scam. This unfortunate incident underscores the persisting danger posed by these deceitful schemes in our community.

Additionally, this occurrence shares striking resemblance to previous phishing incidents reported in the same month. In one instance, a victim was defrauded of approximately $145,000 in value from their Bored Ape Yacht Club (BAYC) NFT collection. Three specific BAYC NFTs were taken in that incident.

In an incident that occurred in April 2024, a trader suffered significant losses, totalling over $180,000 in USDC and Andy tokens. The perpetrators used a similar strategy, executing multiple function calls within a single transaction. This tactic allowed them to siphon funds from the victim’s wallet into several wallets under their control.

Read More

2024-05-20 12:18