Orbit

2024

DeFi

An entity reportedly linked to a cryptocurrency venture capital fund has fallen victim to a major cyberattack,&nbsp;<a style="text-decoration:none" href="https://www.theblock.co/post/320645/35-million-worth-of-tokens-drained-from-a-crypto-whale-in-phishing-attack">losing $36 million</a> worth of tokens in the process.&nbsp;
<div>
 <blockquote class="twitter-tweet">
 🚨 5 hours ago, someone lost 15,079 fwDETH($35M) after signing a "permit" phishing signature.💸 <a href="https://t.co/YG6KlgWMtv">pic.twitter.com/YG6KlgWMtv</a>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1844590237521203610?ref_src=twsrc%5Etfw">October 11, 2024</a>
 </blockquote> 
</div>
The victim, whose identity has not been disclosed, unknowingly signed a malicious permit transaction that allowed hackers to drain a large sum of wrapped Ethereum (fwDETH).&nbsp;
&nbsp;
According to blockchain monitoring service&nbsp;<a style="text-decoration:none" href="https://x.com/lookonchain/status/1844597644343283985?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1844597644343283985%7Ctwgr%5E3bf521c6db333f07edd5e68209b5c5dabb2e1fa7%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fcrypto.news%2Fcrypto-vc-fund-tied-entity-losses-36m-by-signing-phishing-permit-transaction-report%2F">Lookonchain</a>, the attack occurred on October 11, 2024, targeting an on-chain entity believed to be tied to Continue Capital, a well-known crypto venture capital firm.
&nbsp;
The stolen funds, totaling 15,079 fwDETH, were then quickly sold off, causing a dramatic drop in the token’s value. fwDETH's price plummeted by 95% in its trading pair with fwWETH, but has since recovered, remaining down by&nbsp;<a style="text-decoration:none" href="https://dexscreener.com/blast/0x487029635814defe086683a3ae52c1d35e385711">about 43%</a>.
<h2 dir="ltr" id="span-span-how-the-hack-happened-span-span">How the Hack Happened</h2>
According to reports from&nbsp;<a style="text-decoration:none" href="https://x.com/PeckShieldAlert/status/1844596132795777144">PeckShield</a>, the hackers lured the victim into signing a permit message. This permit message, signed offline by the victim, granted the attacker authorization to drain the victim's wallet without needing any further interaction.
&nbsp;
This type of phishing attack is particularly dangerous because it mimics legitimate requests for user signatures. Once the permit was signed, the attacker drained the funds from the victim’s account and quickly liquidated them on decentralized exchanges, causing a major drop in the token’s value.
&nbsp;
Having received $12.8K in fwDETH, the scammer address exchanged 11,826 $DETH for 1,172.8 $ETH (worth $2.8M). Further, it swapped 2,261 fwDETH for 1,114.4 ETH (worth ~$2.7M), according to PeckShield.
&nbsp;
The sharp decline in fwDETH's price also triggered problems for other DeFi protocols. PAC Finance and Orbit Finance, both of which rely on wrapped Ethereum tokens, were reportedly affected by the sudden drop in value.&nbsp;
<h2 dir="ltr" id="span-span-growing-threat-of-phishing-in-crypto-span-span">Growing Threat of Phishing in Crypto</h2>
Phishing attacks like this one are becoming more common and sophisticated. Hackers often disguise their malicious activities as legitimate requests for permissions, preying on the fast-paced nature of cryptocurrency trading, where users are constantly prompted to sign transactions or approve requests.
&nbsp;
According to&nbsp;<a style="text-decoration:none" href="https://blockchaingroup.io/top-10-crypto-losses-of-2024-hacks-frauds-and-exploits/#:~:text=Phishing%20Scams%20Prevail%20And%20Cause,million%20stolen%20across%20150%20incidents.">Certik’s 2024 blockchain security report</a>, phishing is now one of the leading causes of financial loss in the crypto space. In the first half of 2024 alone, $498 million was stolen across 150 incidents due to phishing.&nbsp;
&nbsp;
In September 2024,10,800 victims were impacted by phishing attacks, according to Scam Sniffer. The largest attack that month saw&nbsp;<a style="text-decoration:none" href="https://x.com/realScamSniffer/status/1839923975184625832">$32.43 million</a> worth of spWETH stolen through a phishing permit signature, similar to the attack that drained fwDETH in this latest incident.

Crypto VC-Linked Entity Loses $36M to Phishing Attack - Report

Table of Contents

BSCN

Other articles published on Oct 21, 2024

Buterin pitches solutions to Ethereum’s staking, block production issues

Pump.fun Unveils New "Pump Advance" Trading Terminal, Teases Native Token Release

What is the Latest Trending Blockchain Game "Off The Grid"?

Bitcoin stalls below $70K despite $20B ETF inflow milestone

Meme Coin Madness: Trader Becomes A Millionaire With $96 Bet On PolitiFi Token MAGA (TRUMP)

Bybit Card Expands Cashback Options to Include BTC and ETH

Join our free newsletter for daily crypto updates!