Back

Phishing Attack Steals $1.08M in Aave Ethereum LBTC from User

Security firm Scam Sniffer reports a $1.08 million theft via malicious permission, with SlowMist confirming rapid laundering through Tornado Cash.

ETH
AAVE
LBTC

Summary

Scam Sniffer revealed that a victim lost 12 Aave Ethereum LBTC, valued at about $1.08 million, after unknowingly signing a malicious permission. SlowMist’s Cosine said the attackers swiftly exchanged the stolen LBTC for Ethereum (ETH) and laundered the funds using Tornado Cash. The incident underscores ongoing phishing threats in decentralized finance.

Terms & Concepts
  • Aave: A decentralized lending platform allowing users to borrow and lend cryptocurrencies without intermediaries.
  • Tornado Cash: A cryptocurrency mixing service that obscures transaction trails by pooling and redistributing funds.
  • Phishing: A cyberattack that tricks users into revealing sensitive information or permissions to gain unauthorized access to assets.