Hacker Behind Phishing Attack On Rocket Pool Transfers $10M To Tornado Cash

An incident involving a phishing attack on Rocket Pool in September 2023 has resulted in the transfer of $10M worth of Ether (ETH) to the crypto-mixing protocol Tornado Cash. 

The account responsible for the attack was alerted by blockchain security firm CertiK on March 21. 

#CertiKInsight

We are seeing a deposit of 3700 ETH, which is worth over $10M, into Tornado Cash by EOA 0x8cFDAD729de89f09A188312839A0EC3b1522E107 on Ethereum.

The fund traces to a major phishing incident back in September 2023 where $24M (at the time) worth of assets were…

— CertiK Alert (@CertiKAlert) March 21, 2024

The funds originated from a crypto whale who fell victim to the phishing incident, losing a staggering $24 million in staked ETH on the liquid staking provider Rocket Pool.

During the attack, the hacker executed two transactions, siphoning off 9,579 stETH and 4,851 rETH from the crypto whale. 

The victim had unknowingly signed an “Increase Allowance” transaction, granting the hacker permission to access and spend ERC-20 tokens belonging to the victim. 

See Also: Trending Solana Meme Coin SLERF Surged 30% But Its Involved In Suspicious Activities

This feature, while useful, has raised concerns within the crypto community as it can be exploited by malicious actors deploying fraudulent smart contracts.

PeckShield, another blockchain security company, discovered that the attacker swapped the stolen assets for 13,785 ETH and 1.64 million Dai (DAI). 

A portion of the DAI was transferred to the FixedFloat exchange, while the majority of the pilfered funds were dispersed across various wallets.

Phishing attacks continue to pose a significant challenge for the cryptocurrency space, with Scam Sniffer’s crypto phishing report revealing losses of nearly $47 million in February alone. 

Ethereum was the most targeted network, accounting for 78% of the thefts, and ERC-20 tokens constituted 86% of the stolen assets.

Disclaimer: The information provided is not trading advice. Bitcoinworld.co.in holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.

#Binance #WRITE2EARN

 

The post Hacker Behind Phishing Attack On Rocket Pool Transfers $10M To Tornado Cash appeared first on BitcoinWorld.