4,200 Malicious Smart Contracts Drained Crypto From 5,700 Victims — Here's How They Pulled It Off
4h ago · 1 source
Security researchers have identified over 4,200 malicious smart contracts designed to trick users into unknowingly signing away access to their cryptocurrency. Approximately 5,700 victims fell for these schemes, which exploited the complexity of smart contract approvals to steal funds. The findings highlight the ongoing and growing threat of approval-based scams in decentralized finance.
WHY IT MATTERS
Think of a smart contract approval like giving someone a signed blank check — you're authorizing them to withdraw from your account, sometimes with no limit. In crypto, when you interact with an app or website and your wallet asks you to "approve" something, you might actually be giving a program permission to move your tokens. Scammers create fake apps that look legitimate but are designed solely to get you to sign that approval. Once you do, they can drain your wallet. This research found thousands of these traps and thousands of people who fell for them. It's a reminder that in crypto, every transaction you sign matters — and if you don't understand what you're approving, it's safest not to sign it.
Read the full analysis with a CryptoBipto membership
Create a free account and subscribe to unlock deep-dive analysis on every story.
Get startedSOURCES
RELATED
Educational only — not financial advice.