Data leak [loss] $469,146

Twitter thread by korpi87

2022-08-18 [vendor] Trader signs malicious message
Primary Source ↗
Financial Loss $469,146 (469,146 USD)

Incident Details

An experienced crypto trader lost $470,000 to a hack when they signed a malicious message that permitted an attacker to drain all of their USDC stablecoins from their crypto hot wallet. Unlike most crypto hacks that involve approving malicious contracts, this hack was perpetrated when the trader was tricked into simply signing a malicious message. Signing a message tends to be a safer and more common action with crypto wallets, and so traders are not always as careful, though as this trader discovered, it can still have catastrophic impacts.

Total loss estimated at $469,146.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Trader signs malicious message

Timeline

  1. 2022-08-18 Breach occurred
  2. 2022-08-18 Publicly disclosed