Unknown User Hack

The user lost 4.20 million in a phishing attack on Ethereum, resulting in a loss of 3,725,002 USD worth of aEthWETH and aEthUNI tokens.

On January 21, 2024, a user fell victim to a phishing attack on the Ethereum network. The attacker exploited multiple ERC20 Permit signatures, using temp addresses pre-computed by CREATE2. The user lost 1576.04 aEthWETH and 39,933.12 aEthUNI tokens, equivalent to 3.72 million USD.

The stolen funds were transferred to another EOAs and still remain in these addresses .

Attacker Address:

https://etherscan.io/address/0x0000db5c…e70000

Funds Holder as of Jan 23, 2024:

https://etherscan.io/address/0xd9b78d83…d557Bc

Malicious Transactions:

https://etherscan.io/tx/0x93a0ce07…0c2f09

https://etherscan.io/tx/0xbc43a531…71b583

Malicious Contract Address:

https://etherscan.io/address/0xed0e416e…b60572