#wallet

Previously, we reported about a shocking hack where a scammer stole a $4 million NFT collection by just taking a photo. That case left us with many questions about the technical vector of the attack. The Trust Wallet conducted an investigation and revealed the scheme. The day before the affair, the perpetrator shared the NDA file with the victim and requested KYC information. The fake NDA contained malware that targeted the smartphone. The criminal then persuaded the victim to transfer funds from the multi-sig wallet to a single Trust Wallet to confirm NFT ownership and copied the information he needed. The balance photo was just smoke and mirrors. But damn, this scheme deserves an episode in the new James Bond series.

Looks like we have a new kind of wallet asset theft: taking a picture of the balance screen. A scammer claiming to be an investor stole an entire collection of NFTs worth about $4 million from a Webaverse founder. The fraudster explained that he needed to see the proof of NFTs before signing a partnership agreement. The victim insists that he only showed the scammer the Trust Wallet balance interface. He revealed no seed phrases or private keys. The thief took some pictures of the screen and went out for a smoke. A few minutes later the funds were drained from the wallet, and the potential partner had never returned. The weird story is confirmed by Etherscan. The odd thing is that the theft happened on Nov. 26, but was reported only now. Did the victim hope to wake up one fine day and realize that everything was just a dream?

Arkham Intelligence has developed an app that uses a Twitter handle to search for anyone's activity across various blockchains, including Ethereum, Polygon, and BNB Chain. The app can: find wallet addresses that the user has interacted with; filter the user's recent transactions; visualize their actions on the blockchain. Anyone who wants to join this impressive initiative can sign up for the waitlist. The first entities on the waitlist are probably the IRS and the FRS.

Markus Thielen, Head of Research at Matrixport, believes that the SEC is not targeting stablecoins. The charge against Paxos is indirect. The regulators are planning an attack on Binance, which stored customer funds in the same wallet with its collateral for some in-house tokens. The regulations require that exchanges' corporate assets must be recorded in separate accounts and cannot form part of the proof-of-reserves calculations. That's simple: Binance cannot confirm its BUSD reserves. Paxos Trust Company, which is the only issuer of the exchange's stablecoin, serves as a witness in this case, not a defendant. Has CZ fallen into curly-haired Sam’s trap by mixing up customers' wallets with his own? We find it hard to believe. Hopefully, his accounting skills are way better.

PeckShield, a blockchain security firm, warns that zero-transfer scammers are behind two of the largest gas spenders. The scheme is as follows: 🛑 Fake addresses are created by imitating real ones. 🛑 The TransferFrom function is then used to make a zero transfer from any wallet to a smart contract. 🛑 As a result, a fake transaction history is created and shown in users' wallets and on Etherscan. The only thing left to do is wait for the transfer from the victims who did not thoroughly check the address before sending the money.

More than 40 blockchain companies have offered the Turkish authorities to create an official crypto wallet to accept donations for the victims of the devastating earthquake. Today about 2 thousand people died due to earthquakes in Turkey and Syria. The death toll is expected to rise as hundreds of buildings have been completely destroyed. Cryptocurrency communities always respond instantly to such humanitarian crises. Yes, Ukraine received a lot of donations immediately after the "gas-station" country attack. Turkey, hang in there!

Hacks and phishing attacks prompted Coinbase Wallet devs to enhance user security. So now Coinbase Wallet features: 📌transaction preview to avoid unwanted token swaps. 📌malicious dApps alerts. 📌alerts in case of unauthorized access to your token balance. 📌push notifications about the upcoming token burn. Good job! But to reach full control, the wallet should also report price slippage. This will be the highest zen of trading.

Aptos development team wallet transferred over 1 million APT (~$20 million) from the main wallet to the Binance exchange. More than 1/3 of the total APT supply ($985 million) remains in the wallet. If these coins will hit the market, the APT price may undergo a significant correction. Although APT attracted a lot of attention with a sharp price increase of more than 450% in a month, one should always keep in mind the project is too centralized: 97% of the total supply is held by only 20 wallets. Thus, the price can be easily manipulated.