A new type of theft on the network: how "smart contracts" rob cryptocurrency wallets

Carding

Professional
Messages
2,870
Reaction score
2,511
Points
113
If the NFT deal seems too good to be true, then it might be.

The FBI is alerting potential buyers of non-fungible tokens (NFTs) to the threat of fraudulent websites using so-called "smart drainer contracts" to surreptitiously rob cryptocurrency wallets.

"Smart drainer contracts" are software codes containing bugs or vulnerabilities that allow fraudsters to transfer digital assets - in this case, NFTs and cryptocurrencies - into their wallets without the knowledge of the owner.

Sites masquerading as legitimate NFT trading platforms are actively promoted through compromised accounts of known NFT developers or accounts created to imitate real ones. Posts on these accounts often create a sense of urgency by using phrases like "limited quantities" or calling the promotion a "surprise".

“Fake sites offer visitors to connect their cryptocurrency wallets and buy NFTs. At the same time, users unwittingly connect their wallets to the drainer contract, which ultimately leads to the transfer of their cryptocurrencies and NFTs to wallets controlled by criminals, ”the FBI warns.

After a successful theft, scammers often "launder" the stolen assets through a series of cryptocurrency exchanges or specialized services that mix them with the assets of others to make it difficult to trace the true destination of the stolen NFTs.

The FBI urges potential NFT buyers to be on the lookout and take the following precautions: do research when unexpected NFT offers appear, verify the authenticity of advertising social media accounts, carefully analyze websites offering to connect a cryptocurrency wallet, and treat offers with great attention, offering NFT as a reward.

Victims of such scams or those who suspect fraud are encouraged to report them to the FBI Internet Crime Complaint Center.
 
Top