Crypto Crook Contacts Victim, Returns Partial Loot

In a brazen move, the crypto scammer responsible for stealing $71 million in wrapped bitcoin (WBTC) has reached out to the victim and sent 51 ETH ($151,600) via an on-chain message. This follows the victim's demand for the return of 90% of the stolen funds.

Cryptocurrency Scammer Initiates Contact with Victim, Returns Partial Stolen Funds

May 9, 2024

In a surprising turn of events, the cryptocurrency scammer responsible for the poisoning attack that resulted in the theft of $71 million worth of wrapped bitcoin (WBTC) has contacted the victim and returned a portion of the stolen funds.

According to cryptocurrency investigator ZachXBT, the interaction occurred through an input data message (IDM) on the Ethereum blockchain, a decentralized peer-to-peer messaging mechanism. The scammer initiated the communication by requesting the victim's Telegram details, subsequently sending 51 ETH, equivalent to approximately $151,600.

On-chain data from Etherscan indicates that the scammer sent two messages to the victim, the second of which contained the Telegram contact request. "Leave your telegram, and I'll call you tomorrow," the message purportedly read.

This outreach is presumed to be a response to the victim's demand on May 5 for the return of 90% of the stolen funds. The returned 51 ETH represents approximately 4.2% of the requested amount.

The victim responded via an IDM, warning the scammer of the traceability of the illicitly obtained funds and reiterating their demand for a 90% return. "There's no turning back after this," the victim cautioned, emphasizing, "We both know there's no way to clean these funds. You will be traced."

The victim established a deadline of 10:00 am UTC on May 6, 2024, for the scammer to comply with the request.

Background: The Poisoning Attack

The poisoning attack, a sophisticated cybercrime technique, allowed the scammer to compromise the victim's cryptocurrency wallet and steal WBTC tokens. The stolen funds were subsequently transferred to various Ethereum addresses controlled by the perpetrator.

This incident highlights the evolving nature of cryptocurrency scams and the increasing sophistication of cybercriminals targeting digital assets. It also underscores the importance of vigilance and robust security measures to protect cryptocurrency investments from malicious actors.

As the investigation into the poisoning attack continues, authorities are urging cryptocurrency users to exercise extreme caution when dealing with unfamiliar or suspicious actors. Law enforcement agencies and blockchain analytics firms are actively working to identify and apprehend the perpetrators responsible for this audacious cybercrime.