Hacker Behind Phishing Attack on Rocket Pool Transfers $10M to Tornado Cash

An incident involving a phishing assault in September 2023 has resulted within the switch of $10 million price of Ether (ETH) to the crypto-mixing protocol Twister Money.

Throughout the assault, the hacker executed two transactions, siphoning off 9,579 stETH and 4,851 rETH from the crypto whale. The sufferer had unknowingly signed an “Enhance Allowance” transaction, granting the hacker permission to entry and spend ERC-20 tokens belonging to the sufferer. This function, whereas helpful, has raised issues throughout the crypto group as it may be exploited by malicious actors deploying fraudulent good contracts.

PeckShield, one other blockchain safety firm, found that the attacker swapped the stolen belongings for 13,785 ETH and 1.64 million Dai (DAI). A portion of the DAI was transferred to the FixedFloat change, whereas the vast majority of the pilfered funds had been dispersed throughout numerous wallets.

Phishing assaults proceed to pose a big problem for the cryptocurrency area, with Rip-off Sniffer’s crypto phishing report revealing losses of practically $47 million in February alone. Ethereum was essentially the most focused community, accounting for 78% of the thefts, and ERC-20 tokens constituted 86% of the stolen belongings.

This text incorporates hyperlinks to third-party web sites or different content material for info functions solely (“Third-Occasion Websites”). The Third-Occasion Websites aren’t below the management of CoinMarketCap, and CoinMarketCap is just not liable for the content material of any Third-Occasion Website, together with with out limitation any hyperlink contained in a Third-Occasion Website, or any adjustments or updates to a Third-Occasion Website. CoinMarketCap is offering these hyperlinks to you solely as a comfort, and the inclusion of any hyperlink doesn’t indicate endorsement, approval or suggestion by CoinMarketCap of the location or any affiliation with its operators.
This text is meant for use and should be used for informational functions solely. It is very important do your personal analysis and evaluation earlier than making any materials choices associated to any of the services or products described. This text is just not meant as, and shall not be construed as, monetary recommendation.
The views and opinions expressed on this article are the writer’s [company’s] personal and don’t essentially mirror these of CoinMarketCap.