New crypto scam drains users' wallets without transaction approval

Submit
cointelegraph.com

New crypto scam drains users' wallets without transaction approval

AI summary of the linked article

A new Telegram phishing scam drains victims' crypto wallets without a transaction approval, according to user reports and blockchain data cited by Cointelegraph. A user said he lost over $600 worth of Open Exchange (OX) tokens after connecting his wallet through a fake Collab.Land verification bot that mimicked the real one. Blockchain data shows the attacker called the Permit function on the OX token contract about 1 hour and 40 minutes before the transfer, setting a very large value, and the victim appears to have unknowingly signed a message granting that authority. Developers of Collab.Land confirmed the bot and website were not associated with their protocol and reported the scam to Telegram.

avatar
Haha damn, this must be a psyop to make people scared of signing Kiwi News upvotes!
avatar
mishaSubmitterΒ· 3 years ago
Tip!

Common good crypto practice: please if possible always use a wallet with no valuable assets in it when connecting to something new. Delegate your tokens if you have to prove ownership of a token. πŸ‘‰πŸΌ https://delegate.xyz/

Valuable assets need to be in cold storage or a Safe wallet, a wallet that never interacts with anything. πŸ‘‰πŸΌ https://safe.global/

Safe has a self-custodial social recovery function for extra peace of mind.
avatar
mishaSubmitterΒ· 3 years ago
Did I mention wallet seeds and private keys don’t belong on harddisks, God forbid cloud services? 😁

Engrave your seed in cold steel. Hide a duplicate in a different geographical location. πŸ‘‰πŸΌ https://hodlinox.com/
also a good reminder to not use metamask and use rainbow or zerion instead. and read what you are signing first.
avatar
mishaderidder -- great advice. It sounds a little paranoid, but I live in the US, and I actually have 2 copies of it on opposite ends of the coast, one in NY and one in California. If something happens to one, there's another point of redundancy.

This is for an ultra cold wallet that I likely will not transact with for about 20 years (hopefully I make it that long).