After six days of silence following a $71 million wallet impersonation scam, the stolen cryptocurrency funds associated with the incident are now being transferred. The scam unfolded on May 3 when an investor fell victim to a wallet poisoning scam, mistakenly sending $71 million worth of Wrapped Bitcoin (WBTC) to a decoy wallet address. The scammer engineered the fraud by creating a wallet address with similar alphanumeric characters and executing a small transaction to the victim's account.
Despite the victim's efforts to verify the wallet address by matching initial characters, the subtle discrepancies in the middle characters went unnoticed. This tactic is commonly employed by scammers to deceive investors, capitalizing on visual similarities while concealing differences that could raise suspicion. Following the transfer, the 1,155 WBTC was promptly converted into approximately 23,000 ETH by the scammer, a maneuver often used to obfuscate stolen funds through privacy protocols like Tornado Cash.
The stolen assets remained dormant in the scammer's wallet for six days until blockchain investigation firm PeckShield detected signs of fund laundering on May 8. The perpetrators began fragmenting the stolen funds and distributing them across numerous crypto wallets, utilizing approximately 400 wallets initially and expanding to over 150 wallets in subsequent transactions. Despite these efforts, the trail of stolen funds remains traceable to unidentified scammers at present.
Cryptocurrency scammers and hackers typically exhibit heightened activity during bull markets, exploiting vulnerabilities and capitalizing on investor enthusiasm. It is crucial for investors to prioritize security measures to safeguard their digital assets. An emerging type of scam exploits tokens adhering to the ERC-2612 standard, allowing for "gasless" transfers without requiring ETH approval. However, users must be deceived into signing the message to facilitate unauthorized transactions, as uncovered in a recent investigation into a Telegram group utilizing a counterfeit version of the Collab.Land verification system.
