#User lost $460,000 in a simulated trading scam.#
Hot Topic Overview
Overview
Recently, a user lost 143.45 ETH, approximately $460,800, due to a transaction simulation scam. The attacker exploited the delay between transaction simulation and execution in Web3 wallets. They created a phishing website and, after the user submitted a transaction, immediately tampered with the on-chain state, ultimately leading to the user losing all their assets. The attack process was as follows: the phishing website initiated a "Claim" ETH transfer request. The wallet simulated receiving a small amount of ETH, but the attacker then modified the contract state, causing the actual transaction to drain the user's wallet assets.
Ace Hot Topic Analysis
Analysis
Recently, a user lost 143.45 ETH, approximately $460,800, due to a transaction simulation scam. This incident exposed a potential security vulnerability in the transaction simulation feature of Web3 wallets. Attackers exploited the delay between transaction simulation and actual execution by creating phishing websites and manipulating the on-chain state immediately after users submitted transactions. Specifically, attackers would initiate fake ETH transfer requests, and the wallet would simulate receiving a small amount of ETH. However, the attackers would then modify the contract state, resulting in the user's actual transaction depleting their wallet assets. This incident serves as a reminder for users to exercise extreme caution when using Web3 wallets for transactions, avoid clicking on unknown links, and carefully verify transaction information to prevent similar scams.
Public Sentiment · Discussion Word Cloud
Public Sentiment
Discussion Word Cloud
Classic Views
Transaction simulation functionality has a security vulnerability, attackers can exploit the delay to tamper with the on-chain state, resulting in user losses.
Attackers can induce users to trade through phishing websites, and after users confirm the transaction simulation, they can modify the contract state, resulting in users losing all their assets.
Web3 wallet transaction simulation functionality needs to enhance security to prevent attackers from using delays to deceive.
Users need to carefully identify phishing websites and carefully verify transaction information when making transactions to avoid losses.