Binance hack: scammers are now targeting the hacker.
Of the 608 Ethereum wallets on the FBI's list, one has moved: 0xf5aaadf3bd81f81b97b4389b5c6c6242d8c8f421. On Nov 1 at 02:01 UTC it sent 1 ETH to a fresh wallet, and at 02:07 UTC 46.08 ETH to a second one. Both still hold it.
60 seconds after the first transfer, address poisoners went to work. Wallets that start with the same 0x87a9 and end with the same d04e sent it dust, so that a look-alike would sit in its history. Then came 16 transfers of fake tokens named ETH, one of them spelled with Cyrillic and Greek letters and hidden characters, with its exact amounts, 1.0 and 46.0771. Nine look-alike addresses in all.
It did not take the bait. It has sent nothing since.
If they try it on a hacker, they will try it on you. Check the whole address, not just the first and last characters.
Update on our PROM post: the bots resold that PROM for about 340 ETH, roughly $0.76M, but paid 94% of it to the validator and the block builder for their place in the block. The bots kept about 19 ETH.
Of the 608 Ethereum wallets on the FBI's list, one has moved: 0xf5aaadf3bd81f81b97b4389b5c6c6242d8c8f421. On Nov 1 at 02:01 UTC it sent 1 ETH to a fresh wallet, and at 02:07 UTC 46.08 ETH to a second one. Both still hold it.
60 seconds after the first transfer, address poisoners went to work. Wallets that start with the same 0x87a9 and end with the same d04e sent it dust, so that a look-alike would sit in its history. Then came 16 transfers of fake tokens named ETH, one of them spelled with Cyrillic and Greek letters and hidden characters, with its exact amounts, 1.0 and 46.0771. Nine look-alike addresses in all.
It did not take the bait. It has sent nothing since.
If they try it on a hacker, they will try it on you. Check the whole address, not just the first and last characters.
Update on our PROM post: the bots resold that PROM for about 340 ETH, roughly $0.76M, but paid 94% of it to the validator and the block builder for their place in the block. The bots kept about 19 ETH.
