What happened
The user on Ethereum chain suffered a phishing scam, losing 73.85 wstETH worth approximately $195,887 USD.
On February 4, 2024, a user fell victim to a phishing scam. The victim signed an "Increase Allowance" transaction, which allowed the attacker to steal 73.85 wstETH (worth around $195,887 USD) from the wallet. The attacker first stole 18.46 wstETH and then, almost immediately, another 55.39 wstETH.
Most of the stolen funds were exchanged for ETH and still remain in one of the attacker's addresses as of February 7, 2024.
Attacker's Addresses:
Increase Allowance Transaction
Malicious Transactions:
Funds Holder as of Feb 7, 2024:
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
