Cryptocurrency
[loss] $1M+
"$1.25M Stolen Due to NFT Airdrop Phishing On Polygon"
Primary Source ↗Financial Loss
$1.2M
(1,250,000 USD)
Affected
500K
individuals/accounts
Blockchain(s)
Polygon
Incident Details
A phishing scam in which scammers airdropped fake NFTs impersonating real projects has landed the scammers around $1.25 million in the last two months. The scammers have created more than 1,350 fake NFTs appearing to come from real projects including RocketPool, ApeCoin, Polygon, Uniswap, and Aave, then airdropped them to more than 500,000 wallets. When they viewed the NFTs, the victims were directed to phishing sites where they signed malicious signatures.Around $1.25 million in various assets have been stolen thus far, with the largest single loss exceeding $150,000.
Total loss estimated at $1,250,000.
Technical Details
- Initial Attack Vector
- Phishing attack
- Vendor / Product
- Inferno Drainer thefts on Polygon
Timeline
- 2023-06-23 Breach occurred
- 2023-06-23 Publicly disclosed