A major incident occurred yesterday with Venus, the leading lending protocol on the BNB chain, where a whale user fell victim to a phishing attack, losing 27 million dollars. Ironically, this individual was using a hardware wallet, yet still fell prey.
SlowMist's analysis is very thorough: the hacker may have already replaced the browser plugins on the user's computer. While the user thinks they are operating normally, they are actually signing transactions that grant wallet permissions to the hacker. This type of attack is extremely insidious and hard to defend against. Venus's officials urgently suspended the protocol, stating they are helping the victim recover assets, but to be honest, recovering stolen funds on-chain is incredibly difficult. This incident serves as a wake-up call for all DeFi users: in a decentralized world, security responsibility lies entirely with oneself. From private key management to every signature, any issue at any stage could lead to total loss.