Stolen crypto funds from a recent $71 million wallet impersonation scam are now being moved after a six-day dormant period. The scammer converted the stolen Wrapped Bitcoin (WBTC) to Ether (ETH) and held it for six days before starting to launder it through multiple crypto wallets. By using around 400 wallets, the scammer aimed to dilute and obscure the stolen funds, but blockchain analysis shows they can still be traced back to the scammer.
$71 Million Crypto Heist Proceeds Stir from Dormancy, Laundering Process Underway
Six days after a brazen wallet impersonation scam siphoned $71 million worth of cryptocurrency, the stolen funds have begun to circulate, triggering heightened surveillance and prompting fresh concerns about the evolving tactics of cybercriminals.
On May 3, an unsuspecting investor fell prey to a meticulously crafted wallet poisoning scheme. The perpetrator mirrored the victim's wallet address with a near-identical string of alphanumeric characters, exploiting a common practice of visually verifying addresses only by the beginning and end characters. This subtle deception resulted in the unsuspecting victim transferring a staggering 97% of their crypto assets to the imposter's wallet.
Analysis of blockchain data, conducted by leading investigation firm PeckShield, reveals that the stolen funds were promptly converted to Ether (ETH), a move commonly employed by hackers to obscure the trail and facilitate laundering through privacy-enhancing protocols like Tornado Cash. The proceeds from the stolen Wrapped Bitcoin (WBTC) were converted into approximately 23,000 ETH, which remained dormant in the scammer's wallet for six days.
However, on May 8, PeckShield detected suspicious activity, indicating that the stolen funds were being laundered. The hacker fragmented the loot into smaller portions and distributed it across numerous crypto wallets, utilizing approximately 400 wallets to dilute the stolen funds and hamper traceability. The laundering process resulted in the funds being concealed in over 150 wallets, but authorities emphasize that the ultimate destination of the stolen assets can still be traced back to the unknown perpetrator.
The recent incident underscores the heightened activity of crypto scammers and hackers during bull markets, exploiting the increased investor enthusiasm and trading volume. To safeguard against these nefarious actors, experts strongly advise implementing robust security measures, including due diligence in verifying wallet addresses, utilizing reputable exchanges and wallets, and maintaining vigilance against phishing attempts.
In a recent twist, a novel scam has emerged, allowing malicious actors to drain users' cryptocurrency wallets without their authorization. This scam capitalizes on the ERC-2612 token standard, which enables "gas-less" transfers. By tricking users into signing a message, hackers can orchestrate the transfer of funds without the victim's explicit approval. A recent investigation by Cointelegraph uncovered a Telegram group orchestrating such scams, leveraging a counterfeit version of the Collab.Land Telegram verification system.
These evolving threats require heightened vigilance from crypto investors and regulators alike. Continuous education, awareness campaigns, and proactive measures are crucial to combat the persistent threat of crypto scams and protect the integrity of the digital asset landscape.
