What happened
The user lost 4.20 million in a phishing attack on Ethereum, resulting in a loss of 3,725,002 USD worth of aEthWETH and aEthUNI tokens.
On January 21, 2024, a user fell victim to a phishing attack on the Ethereum network. The attacker exploited multiple ERC20 Permit signatures, using temp addresses pre-computed by CREATE2. The user lost 1576.04 aEthWETH and 39,933.12 aEthUNI tokens, equivalent to 3.72 million USD.
The stolen funds were transferred to another EOAs and still remain in these addresses .
Attacker Address:
Funds Holder as of Jan 23, 2024:
Malicious Transactions:
Malicious Contract Address:
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
