Crypto victim loses $908K in sophisticated phishing attack

A crypto user lost $908,551 to a wallet-draining scam 458 days after unknowingly signing a malicious ERC-20 approval transaction, according to onchain data. The approval, likely signed through a phishing site or fake airdrop, gave the scammer's wallet "0x67E5Ae" ongoing access to the victim's funds. The scammer, linked to the pink-drainer.eth wallet address, executed the theft on Aug. 2 at 4:57am UTC, and the article says the scammer likely monitored the wallet for about a month before draining it in a single transaction.