Crypto trader loses $55M in DAI to phishing attack using Inferno Drainer kit

4 weeks ago

Blockchain information level Scam Sniffer reported that a crypto trader mislaid $55.47 cardinal successful DAI stablecoin to a phishing attack.

According to the firm, the trader mislaid their assets aft mistakenly transferring ownership of their collateralized indebtedness presumption (CDP) connected DeFi Saver Proxy to a malicious wallet.

DeFi Saver Proxy is simply a proxy declaration deployed by Maker, the issuer of DAI stablecoin, for traders managing collateralized indebtedness positions (CDPs).

The victim, identified arsenic ‘0xf2B8,’ executed a ‘SetOwner’ transaction, unknowingly redirecting ownership of their DeFi Saver Proxy declaration to a phishing address. When the unfortunate attempted to execute a transaction, it failed due to the fact that they nary longer owned the DeFi Saver Proxy.

The attacker past transferred ownership to different code and drained the full $55.47 cardinal successful DAI from the victim’s account.

Yu Xian, the laminitis of blockchain information steadfast SlowMist, pointed out that the attacker utilized the notorious Inferno Drainer crypto wallet-draining kit to perpetrate the attack.

Meanwhile, the blockchain analytical level Lookonchain stated that the attacker had exchanged 27.5 cardinal DAI for 10,625 ETH arsenic of property time.

Phishing exploits

This latest exploit highlights the continued threat of phishing attacks successful the crypto industry. In these frauds, attackers impersonate morganatic entities to bargain delicate information and summation entree to their victims’ crypto wallets.

According to a study by Scam Sniffer, Wallet Drainers, a benignant of phishing malware, are often utilized connected these phishing websites to instrumentality users into signing malicious transactions. This twelvemonth alone, implicit $314 million worthy of integer assets were stolen done phishing exploits successful the archetypal fractional of 2024.

These attacks affected 266,713 victims and progressive assorted phishing methods, including Permit, Increase Allowance, Increase Approval, and Uniswap Permit2. Pendle tokens were the astir affected assets, followed by Restaking and Aave Collateral assets.

The station Crypto trader loses $55M successful DAI to phishing onslaught utilizing Inferno Drainer kit appeared archetypal connected CryptoSlate.

View source