Slow Mist Cosine: Angel Drainer uses Permit offline authorization signature method for $1.3 million aOptWETH

The founder of SlowMist, Yu Xian, posted on social media that Angel Drainer used the offline authorization signature method of Permit to steal aOptWETH worth $1.3 million from a certain address. Earlier reports said that about 14 hours ago, an address lost 553 aOptWETH (worth $1.3 million) due to phishing scams on the network. The victim signed a malicious ERC20 Permit message.

phishing scam

Comments

All Comments

Recommended for you

CointimeSG ·

Lutnick, Cantor Fitzgerald negotiated a 5% ownership stake in Tether: WSJ

Cantor, which holds most of Tether’s $133 billion in reserves, negotiated a 5% ownership interest in the stablecoin issuer within the past year, according to The Wall Street Journal.
CointimeSG ·

Bitcoin price dip may spur buying spree in BNB, AVAX, NEAR and OKB

Bitcoin sellers take the upper hand as BTC struggles to rally to $100,000. What will altcoins do?
CointimeSG ·

Bitcoin may reach $180K by the end of 2025 — TYMIO founder

The current CryptoQuant Bitcoin exchange reserve metric is roughly 2.5 million coins — the lowest level recorded during this market cycle.
CointimeSG ·

ON–293: Yield

Coverage on Convex Finance, Stake DAO, and Pendle
CointimeSG ·

Comparing IBIT & CBOE to BTC Options on Deribit

Since this week the crypto derivatives market offers various platforms for trading Bitcoin options, most notably the iShares Bitcoin Trust ETF (IBIT) options in the U.S. and the BTC options on Deribit and soon the ETF index options on CBOE.
CointimeSG ·

Boost Your Bitcoin Node Sync With UTXO Snapshots

A guide for how to significantly speed up syncing a new Bitcoin Core node using the UTXO snapshot feature.
Squad3 ·

Squad3: The New Leader in the Social Earnings Track

Squad3: The New Leader in the Social Earnings Track
Mint Blockchain ·

Mint Blockchain Community Gathering Vol. 3 | Poker Night!

Amid excitement and anticipation, the Mint Blockchain community is gearing up for its third Community Gathering, this time with the thrilling theme of Poker Night!
Mint Blockchain ·

Tropical Rainforest Point Zone Wave 2：Get your RedotRay Crypto Card

We believe this partnership will further accelerate the integration of cryptocurrency into everyday life, providing users with a more flexible and diversified payment experience! 💳✨
Cosine: After a user used GPT to write a bot with a backdoor code, the private key was sent to a phishing website

SlowMist Yu Xian stated in a post on the X platform that a user used GPT to write a bot with code and sent the private key to a phishing website. The reason why the private key was stolen was because it was directly sent to the phishing website in the HTTP request body. Yu Xian reminded that when using LLM such as GPT/Claude, one must pay attention to the common fraudulent behavior of these LLM. It was previously mentioned that AI poisoning attacks were carried out, and now this is a real attack case targeting the crypto industry.