Phishing Hack

On March 12, 2025, a victim lost $1.82M worth of cUSDCv3 due to a phishing attack. The scammer tricked the victim into signing a malicious transaction, allowing them to transfer the assets.

The attacker (0x000069f7…2f0000) used a phishing scheme to deceive the victim (0xa4c11b4a…84683f) into signing an unauthorized transaction. This likely involved:

Fake dApp or Social Engineering – The victim was lured into interacting with a malicious contract, possibly through fake websites, Discord messages, or Twitter DMs.

Malicious Transaction Signature – The victim unknowingly approved token transfers, allowing the scammer to drain $1.82M worth of cUSDCv3 from their wallet.

Immediate Asset Transfer – The funds were quickly moved to the scammer’s wallet, with no reported recovery attempts at this time.