What happened
On March 12, 2025, a victim lost $1.82M worth of cUSDCv3 due to a phishing attack. The scammer tricked the victim into signing a malicious transaction, allowing them to transfer the assets.
The attacker (0x000069f7…2f0000) used a phishing scheme to deceive the victim (0xa4c11b4a…84683f) into signing an unauthorized transaction. This likely involved:
Fake dApp or Social Engineering – The victim was lured into interacting with a malicious contract, possibly through fake websites, Discord messages, or Twitter DMs.
Malicious Transaction Signature – The victim unknowingly approved token transfers, allowing the scammer to drain $1.82M worth of cUSDCv3 from their wallet.
Immediate Asset Transfer – The funds were quickly moved to the scammer’s wallet, with no reported recovery attempts at this time.
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
