This isn’t phishing — it’s the crypto version of “they stole my house, the keys, and moved in before I noticed.” 😅
Binance News
--
Solana Wallet Phishing Attack Results in Significant Asset Loss
According to PANews, SlowMist recently reported on its official WeChat account that a user sought assistance after falling victim to a phishing attack. The user noticed unusual authorization records in their Solana wallet and attempted to revoke the authorization but was unsuccessful. The affected wallet address was provided for investigation.
Blockchain analysis revealed that the user's account owner permissions had been transferred to an address beginning with 'GKJBEL.' As a result, the user lost assets valued at over $3 million, while an additional $2 million worth of assets remained in a DeFi protocol and could not be moved. Fortunately, with the help of the relevant DeFi platform, the $2 million in assets were successfully recovered.
The victim attempted to initiate a transfer from the compromised account to their own address to verify permissions, but all transactions failed. This incident closely resembles the 'malicious multi-signature' attacks frequently seen in the TRON ecosystem. Unlike traditional 'authorization theft,' this attack involved the replacement of core owner permissions by the attacker. Consequently, the victim was unable to transfer funds, revoke authorizations, or manage DeFi assets. Although the funds were visible, they were beyond the victim's control.
Blockchain analysis revealed that the user's account owner permissions had been transferred to an address beginning with 'GKJBEL.' As a result, the user lost assets valued at over $3 million, while an additional $2 million worth of assets remained in a DeFi protocol and could not be moved. Fortunately, with the help of the relevant DeFi platform, the $2 million in assets were successfully recovered.
The victim attempted to initiate a transfer from the compromised account to their own address to verify permissions, but all transactions failed. This incident closely resembles the 'malicious multi-signature' attacks frequently seen in the TRON ecosystem. Unlike traditional 'authorization theft,' this attack involved the replacement of core owner permissions by the attacker. Consequently, the victim was unable to transfer funds, revoke authorizations, or manage DeFi assets. Although the funds were visible, they were beyond the victim's control.
Disclaimer: Includes third-party opinions. No financial advice. May include sponsored content. See T&Cs.
SOL
139.03
+5.98%