Cryptocurrency sika kotoku drain, adwemmɔne smart contracts, ne aba kasasin apam¶

Sɛ wuhu sɛ wo ankasa hwɛ cryptocurrency sika kotoku (te sɛ MetaMask, Rabby, Phantom, Trust Wallet, Coinbase Wallet, anaa hardware sika kotoku te sɛ Ledger anaa Trezor) de nsiyɛ reyɛ token ne NFTs a, ɛyɛ dijitaal sikasɛm mu ntɛmpɛ a emu yɛ den, nea ɛto so abien. Esiane sɛ ɔmanfo blockchain nkitahodi wɔ Ethereum, Bitcoin, Solana, Arbitrum, Base, Polygon, ne BNB Chain yɛ cryptographically irreversible bere a wɔasi so dua wɔ block bi mu pɛnkoro nti, wo tumi a wode besie agyapade biara a aka no gyina nea wobɛyɛ wɔ simma anum a edi kan no so koraa.

Cryptocurrency sika kotokuo drain biara hyɛ mfiridwuma mu akuo ahodoɔ mmienu no mu baako mu: sɛ wode wo nsa hyɛɛ malicious smart contract approval anaa Permit2 signature ase wɔ phishing website (a ɛma attacker tumi twe tokens pɔtee bi firi wo address so a onni wo seed phrase), ANAA wo 12-to-24-word secret recovery seed phrase / private key ankasa na wɔde too gua (ɛnam atoro sika kotoku sait, clipboard malware, mununkum backup hack, anaa infostealer virus so). Sɛ wohu ntua abien no mu nea ɛrekɔ so, wobɔ nkwagye sika kotoku a ɛho tew a mframa mu kwan wɔ afiri bi a ɛnyɛ nea wɔahyɛ da ayɛ so, wotwa token allowances a anohyeto nni mu, na wohwehwɛ sika a wowiae kɔ centralized exchange off-ramps so a, ɛma wunya hokwan a eye sen biara sɛ wubegyae nsu a ɛkɔ nsu mu no na wode agyapade a wowiae no ahyɛ nwini mu.

Yɛ eyi mprempren¶

Sɛ wuhu sɛ nnwuma a wɔmma ho kwan a ɛrekɔ so a ɛresɛe wo cryptocurrency sika kotoku anaasɛ wuhu sɛ woakɔ phishing site bi so nkyɛe anaasɛ woayi wo aba kasasin no apue a, yɛ anammɔn asia yi nnidiso nnidiso pɛpɛɛpɛ:

1. MMFA kɔmputa koro no ara nni dwuma mfa nyɛ nkwagye sika kotoku foforo: Sɛ wo PC anaa Mac no anya infostealer malware (te sɛ Lumma Stealer, Atomic macOS Stealer, anaa Poseiden) anaasɛ browser ntrɛwmu a ɛyɛ hu a, sɛ wobɔ sika kotoku foforo wɔ saa kɔmputa koro no ara so a, ɛde wo aba kasasin foforo no ma ɔtowhyɛfo no ntɛm ara. Fa smartphone anaa hardware sika kotoku a ɛtetew mu, ɛho tew na yɛ sika kotoku address a ɛyɛ foforo a ɛnyɛ nea wɔahyɛ da ayɛ a ɛfa baabi a wopɛ sɛ wokɔ no mprempren.
2. Transfer wo native gas tokens a ɛda so te ase ne sika a wotumi de kɔ sika kotoku foforo a ɛho tew no mu KAN: Ansa na wobɛyɛ biribi foforo biara no, fa wo sika a aka a wotumi de kɔ baabi foforo (ETH, BTC, SOL, USDC, USDT, WBTC) fi sika kotoku a wɔasɛe no no mu kɔ wo sika kotoku a ɛho tew foforo no address so tẽẽ. Gyae dɔla kakraa bi pɛ a ɛyɛ native gas (te sɛ 3 kosi 5 USD a ɛyɛ ETH, SOL, anaa BNB) sɛ ɛho hia sɛ wotwa smart contract approvals mu wɔ gyinabea ahorow a wɔatoto mu a aka no ho a.
3. Hwɛ sɛ ɔtowhyɛfo no wɔ wo Seed Phrase anaasɛ Malicious Token Approval nkutoo:
   • Sign of a Malicious Smart Contract / Permit2 Approval: Token pɔtee biako pɛ (te sɛ USDT anaa NFT ahoboa) na wɔtwee faa TransferFrom bere a woabɔ "Approve" anaa "Sign" wɔ wɛbsaet bi so akyi, bere a wo kurom ETH/SOL gas balance no te hɔ a obiara nkaa no.
   • Sign of a Compromised Seed Phrase / Private Key: Sika biara a ɛfa blockchains ahorow pii (Ethereum, Solana, Bitcoin, Arbitrum) so no, wɔreprapra no denam tẽẽ so Transfer frɛ, na native ETH/SOL biara a wode bɛmena no, wɔwia wɔ sekan 1 mu denam automated sweeper bot so.
4. Twe active smart contract token approvals nyinaa mu ntɛm ara: Sɛ wo kurom ETH/SOL gas da so ara wɔ wo sika kotoku mu a, bue allowance manager a wogye no di (revoke.cash, Etherscan Token Mpeneebɔ Nhwehwɛmufo wɔ etherscan.io/tokenapprovalchecker, anaa Rabby Wallet’s built-in Approval Manager) ne Revoke token spending approvals a anohyeto nni mu ne Permit2 nsaano nkyerɛwee a wɔde ama apam address ahorow a wonnim nyinaa.
5. Twa dApp nhyiamu a ɛreyɛ adwuma nyinaa ne WalletConnect links: Bue wo sika kotokuo nhyehyɛeɛ -> Connected Sites / WalletConnect Sessions na klik Twa Ne Nyinaa mu sɛdeɛ ɛbɛyɛ a phishing wɛbsaet no rentumi pop up signature requests bio.
6. Sɛ "Sweeper Bot" bi rewia gas a wode asie ntɛm ara de agye staked tokens a, fa Flashbots / MEV rescue bundler di dwuma: Nkɔ so mfa ETH nkɔ sika kotoku a sweeper bot di so da, bot no automated script no hwɛ mempool no so na ɛwia wo ETH wɔ milisecond mu ansa na woatumi akliki "Unstake". Mmom, fa kokoam ERC-4337 / Flashbots MEV atom bundle nkwagye adwuma (te sɛ flashbots.net whitehat nnwinnade anaa revoke.cash delegated fee features) de tua gas ho ka na wɔayi token ahorow wɔ block biako a wontumi nkɔ anim mu.

Gyinaesi dua: crypto sika kotoku a ɛrekɔ so a ɛreyɛ adwuma no a wobegyae¶

Di saa bere ankasa mu mfiridwuma mu triage flowchart yi akyi na gyae mogya no na gye wo dijitaal agyapade a ɛda so te ase no:

flowchart TD
    A["Wɔahu Crypto Nkitahodi a Ɛkɔ a Wɔmma Ho kwan"] --> B["Yɛ Brand-New Clean Wallet wɔ Clean Device / Hardware Wallet a ɛyɛ soronko so"]
    B --> C{"So wokyerɛw wo aba kasasin a ɛwɔ nsɛmfua 12/24 no anaasɛ wotwee fael bi, anaasɛ wobɔ Sign/Approve nkutoo wɔ wɛbsaet bi so?"}
    C -->|"Klik Sign / Approve / Claim nko ara wɔ dApp bi so"| D["Smart Contract anaa Tumi krataa a ɛyɛ hu2 Drain"]
    D --> E["Ntɛm ara kɔ revoke.cash anaa Etherscan Token Approvals na Revoke malicious allowances"]
    E --> F["Fa nsu token a aka no kɔ wo sika kotoku foforo a ɛho tew no mu sɛ ahwɛyiye"]
    C -->|"Type Seed Phrase, de Private Key kɔ amannɔne, anaasɛ ɔde PC malware yɛɛ adwuma"| G["Aba kasasin a edi mũ / Private Key Compromise"]
    G --> H{"So Sweeper Bot a ɛyɛ adwuma no rewia ETH/SOL gas biara a wode bɛto hɔ ntɛm ara?"}
    H -->|"Dabi: Native gas da so ara yɛ adwuma"| I["Evacuate nsuo sika nyinaa & unstake DeFi gyinabea ntɛm ara kɔ foforo clean wallet"]
    H -->|"Yiw: Sweeper Bot wia gas wɔ < sikani 2 mu"| J["GYAE gas a wode bɛmena. Fa Flashbots private RPC atom bundle di dwuma de gye staked/airdrop tokens"]
    F --> K["Trace ɔtowhyɛfo sika kotoku wɔ Block Explorer, bɔ amanneɛ kyerɛ Exchange Compliance & FBI IC3 / Polisifo"]
    I --> K
    J --> K

Ntuo a ɛde ɔyare mmoawa ba no a wɔrehwehwɛ: Smart Contract Drainer vs. Seed Phrase Compromise¶

Sɛnea ɛbɛyɛ a worenhwere sika pii bere a worebɔ mmɔden sɛ wobɛkora wo sika kotoku so no, ɛsɛ sɛ wudi kan te sɛnea ɔtowhyɛfo no de wo sika rekɔ baabi foforo no ase denam wo sika kotoku address a wobɛhwehwɛ wɔ ɔmanfo block explorer so (etherscan.io, . solscan.io, . arbiscan.io, . basescan.org, anaasɛ mempool.space).

Ntotoho a ɛfa 4 atitiriw cryptocurrency sika kotoku drain akwan¶

Protocol 1: Smart Contract a Ɛyɛ Bɔne a Wobegyae anaasɛ Permit2 Nsuo a ɛtwetwe nsuo¶

Sɛ wo ne decentralized finance (DeFi) protocols a ɛwɔ Ethereum ne EVM-compatible blockchains (Arbitrum, Optimism, Base, Polygon, Avalanche, BNB Chain) so di nkitaho a, tokens te sɛ USDC, USDT, DAI, PEPE, anaa WETH de ERC-20 gyinapɛn di dwuma. Sɛnea wɔayɛ no, apam a nyansa wom ntumi nyi ERC-20 token mfi wo sika kotoku mu gye sɛ wudi kan ma no Allowance. Phishing kits ("Drainers-as-a-Service" te sɛ Angel Drainer, Pink Drainer, anaa Inferno Drainer) daadaa wɔn a wɔde di dwuma no ma wɔma Unlimited Allowance (115792089237316195423570985008687907853269984665640564039457584007913129639935 units) anaasɛ wɔde wɔn nsa hyɛ ase wɔ off-chain EIP-2612 Permit / Uniswap a wɔde sesa nneɛma Permit2 nkra tẽẽ kɔ scammer no apam so.

Sɛnea wobɛtwa token approvals a ɛyɛ bɔne mu wɔ sikɔne 60 mu¶

1. Bue Allowance Revocation adwinnade a ɛfata, a ɛde ne ho:
   • Twe.sika (revoke.cash) , Ɛboa bɛboro 100 EVM blockchains na ɛkyerɛ abien no nyinaa gyinapɛn ERC-20 / ERC-721 pene ne Permit2 nsaano nkyerɛwee a wɔakyerɛw nna a ɛbɛba awiei.
   • Block Explorer Aban Mpeneebɔ Nhwehwɛmufo:
     • Ethereum: 1 . etherscan.io/tokenapprovalchecker
     • BNB Nkɔnsɔnkɔnsɔn: bscscan.com/tokenapprovalchecker
     • Polygon: 100. polygonscan.com/tokenapprovalchecker
     • Arbitrum: 1 . arbiscan.io/tokenapprovalchecker
     • Nhini: basescan.org/tokenapprovalchecker
   • Rabby Wallet Built-in Security Tab: Sɛ wode Rabby Wallet di dwuma a, klik Approvals kyɛm ahyɛnsode no so tẽẽ wɔ wallet interface no mu na fa batch-revoke apam a asiane wom a wunbue wɛb krataafa.
2. Hyɛ nhyehyɛe a wɔapene so no sɛnea "Nea Foforo" anaa "Boɔ a Ɛwɔ Asiane Mu":
   • Hwɛ Spender adum no. Mmara kwan so protocols bɛda labels a wɔagye atom te sɛ Uniswap: Universal Router anaasɛ Aave: Pool V3.
   • Drainers a ɛyɛ bɔne taa pue sɛ raw hexadecimal address a wɔannye antom (e.g., . 0x4f8a...9c12) anaasɛ atoro apam bi a wɔde adi dwuma nnansa yi.
3. Klik "Revoke" na si asɛm no so dua wɔ wo sika kotoku mu:
   • Sɛ wobɔ Revoke a, ɛde on-chain transaction a ɛkyerɛw nea ɔsɛee no sika no san kɔ ** .0** na ɛyɛ.
   • Sɛ saa asɛm no si so dua wɔ blockchain no so wie (mpɛn pii no wɔ sikani 2 kosi 12 mu) a, wɔde akontaabu twa drainer apam no fi wo sika kotoku no mu na entumi ntwe saa token no cent foforo.

Protocol 2: Di nkonim wɔ automated "Sweeper Bot" wɔ aba kasasin a wɔagyae mu¶

Sɛ hacker bi awia wo ankasa 12-word anaa 24-word recovery seed phrase (anaasɛ raw private key) a, wɔde wo private key no hyɛ automated server script a wɔfrɛ no Sweeper Bot mu ntɛm ara.

Sɛnea Sweeper Bot kyere wɔn a wɔayɛ wɔn basabasa no¶

Fa no sɛ wo Ethereum sika kotoku a wɔagyae mu no da so ara wɔ $15,000 bo a ɛyɛ staked tokens wɔ Aave, Lido, anaa EigenLayer apam mu (anaasɛ token airdrop a ɛreba a wobetumi agye), ANAA ɛda so ara kura ERC-20 token a ɔtowhyɛfo no nnya ntu nkɔe, nanso ɔtowhyɛfo no popaa wo native ETH balance no kɔɔ fam koduu 0.0000 ETH na ɛyɛ.

1. Sɛ wopɛ sɛ woyi wo \(15,000 tokens no fi mu anaasɛ wode bɛkɔ baabi a ahobammɔ wɔ a, wo sika kotoku a woasɛe no hia **\)2.00 a ne bo yɛ ETH de atua blockchain network gas fee**.
2. Wode $5.00 a ɛyɛ ETH fi wo Coinbase akontaabu mu kɔ wo sika kotoku a wɔayɛ no basabasa no mu sɛnea ɛbɛyɛ a wubetumi akliki "Unstake".
3. Wɔ sikani 0.8 mu wɔ wo $5.00 ETH deposit landing, ansa na wo nnipa nsateaa mpo betumi akliki "Unstake" button no, hacker no automated Sweeper Bot hu ETH a ɛba wɔ ɔmanfo mempool no mu na ntɛm ara tow gas a ɛho hia kɛse a ɛwia wo $5.00 ETH no san kɔ hacker no address so ntɛm ara.
4. Wɔn a wɔayɛ wɔn basabasa no taa bɔ mmɔden sɛ wɔde ETH bɛmena mpɛn 10 a ɛtoatoa so, na wɔhwere gas $50 anaa $100 kɔ Sweeper Bot no mu bere biara bere a wɔn token ahorow a wɔde ahyɛ mu no da so ara da sika kotoku a wɔasɛe no no mu no.

Sɛnea wobɛdi Sweeper Bot so nkonim denam Flashbots / Private MEV Atomic Bundles so¶

Gyae sɛ wode ETH sika a wode bɛto hɔ daa kɔ sika kotoku a Sweeper Bot hwɛ so. Sweeper bots hwɛ ɔmanfo nkitahodi mempool na wohia block 1 (anaasɛ ɔmanfo a wɔretwɛn) na wɔahu na wɔawia wo ETH a wode asie no. Wubetumi adi Sweeper Bot biara so nkonim denam Flashbots Protect / MEV Atomic Bundling (wɔ Ethereum ne EVM nkɔnsɔnkɔnsɔn so) anaa Jito Bundles (wɔ Solana so) a wode bedi dwuma no so:

1. Sɛnea Atomic Rescue Bundle yɛ adwuma: Sɛ anka wobɛsoma ETH wɔ Block #1 na woabɔ mmɔden sɛ wobɛkliki "Transfer/Unstake" wɔ Block #2 mu no, atom bundle bi de nkitahodi abien a ɛsono emu biara gu kokoam nhyehyɛe biako mu a wɔde mena tẽẽ kɔ siw adansifo kwan denam Private RPC so (a ɔmanfo mempool a Sweeper Bot wɔ no nhu koraa hwɛ a wɔrehwɛ):
   • Bundle Transaction #1 (fi wo Clean Safe Wallet mu): Ɛde gas pɛpɛɛpɛ mena (0.0015 ETH) kɔ Compromised Wallet no so.
   • Bundle Transaction #2 (a wɔadi kan de ne nsa ahyɛ ase denam Compromised Wallet no so): Ntɛm ara na ɛyɛ unstake() anaasɛ transfer() wo tokens a ɛsom bo no mu kɔ wo Clean Safe Wallet, di 100% wɔ ɛno mu 0.0015 ETH gas a ɛwɔ block koro no ara pɛpɛɛpɛ wɔ microsecond koro no ara pɛpɛɛpɛ.
2. Esiane sɛ nnwuma abien no nyinaa yɛ atomicly wɔ block koro no ara mu a zero public mempool visibility, hacker no Sweeper Bot no nhu da sɛ ETH no ba na efi hɔ ne 0.0000 ETH aka bere a wo token ahorow no si fam dwoodwoo wɔ wo sika kotoku a ɛho tew mu no.
3. Whitehat Nkwagyeɛ Nneɛma a Wɔgye Di Ma Sweeper Bot Victims:
   • Seal 911 (Security Alliance Whitehat Emergency Hotline): Paradigm ne blockchain ahobammɔ ho nhwehwɛmufo atitiriw na wɔyɛɛ no. Sɛ wowɔ sika a ɛho hia a wɔakyere wɔ sweeper bot akyi anaasɛ active smart contract exploit a, di official verified SEAL 911 bot wɔ seal911.org (anaasɛ ɛnam wɔn Telegram link a ɛyɛ aban de so wɔ securityalliance.org) ma whitehat MEV nkwagye bundling mmoa a wontua hwee.
   • Flashbots Whitehat Nkwagye Nwoma: Nkyerɛwde a wɔabue (flashbots/searcher-sponsored-tx) wɔ docs.flashbots.net ma wo kwan ma wo sponsor gas fi sika kotoku a ɛho tew mu de gye ERC-20/ERC-721 agyapade fi safe a asɛe mu a wunkyerɛw amanne kwan so mmara.
   • EIP-7702 / Delegated Gas Tools: Nnɛyi nkwagye mfiri a wɔde afrafra nnwinnade te sɛ revoke.cash ne Ambire/Rabby ma kwan ma wotua revocation anaa rescue gas fi sika kotoku a ɛto so abien mu.

Protocol 3: Sika a wɔawia a wɔbɛhwehwɛ, sikasesɛw a wɔbɛma ayɛ nwini wɔ off-ramps, ne mmarahyɛ baguafo amanneɛbɔ¶

Bere a obiara ntumi nsan asɛm bi wɔ decentralized blockchain so no, cybercriminals awiei koraa no wɔpɛ sɛ wɔdannan crypto a wowia no kɔ sika a wɔsɛe no mu anaasɛ stablecoins a ɛho tew. Sɛ sika a wɔawia no ka Centralized Exchange (CEX) (te sɛ Binance, Coinbase, Kraken, OKX, Bybit, anaa KuCoin) anaasɛ ɛda so ara sie wɔ centralized stablecoins (Tether / USDT ne Circle / USDC) mu a, saa sika no BETUMI ayɛ frigye wɔ nea ɔde mae anaasɛ exchange compliance kuw no mu sɛ woyɛ ade ntɛmntɛm na wode mmarahyɛ ho amanneɛbɔ a ɛyɛ aban de kɔma a.

1. Ntɛm ara wɔ nkɔnsɔnkɔnsɔn hwehwɛ ne stablecoin freeze kɔkɔbɔ¶

1. Kɔpi Adwuma no Hash (TxID) ne Attacker’s Receiving Address: Bue block explorer no ma wo nkɔnsɔnkɔnsɔn no, copy transaction hash pɔtee a ɛfa korɔnbɔ no ho, na klik recipient wallet address a ogyee wo sika no so.
2. Mpopa wo browser abakɔsɛm anaa wo sika kotoku mu nsɛm da: Forensic nhwehwɛmufo hia phishing URL pɔtee a wokɔɔ hɔ ne bere nsɔano pɔtee.
3. Sɛ dodow a ɛdɔɔso a USDT (Tɛther) anaa USDC (Circle) na wowiaa: Nea ɛnte sɛ decentralized ETH anaa BTC, abien no nyinaa Tether (USDT) ne Kyinhyia (USDC) wɔ smart contract dwumadie a wɔasisi mu (addBlackList() / . blacklist()) a ebetumi de USDT anaa USDC a wɔawia no ahyɛ hacker no ankasa sika kotoku mu tẽẽ bere a wɔanya mmarahyɛ bagua adesrɛ a egye ntɛmpɛ anaa asɛnnibea ahyɛde no.
4. Track baabi a hacker no de sika no kɔ denam free visual tracers so:
   • Fa hacker no sika kotoku address no hyɛ MetaSleuth (metasleuth.io), Nsukyenee a Wɔde Di Dwuma (misttrack.io), Abodoo a wɔayam ( .breadcrumbs.app), anaa Arkham Nyansa (platform.arkhamintelligence.com) na ɛyɛ.
   • Siesie Etherscan / Solscan Watch Alert a wontua hwee wɔ hacker no sika kotoku address so sɛnea ɛbɛyɛ a wo nsa bɛka email ntɛm ara a hacker no de sika a wowiae no kɔ Centralized Exchange deposit address (sɛ nhwɛso no, address a wɔakyerɛw so Binance 14, . OKX, . FixedFloat, anaasɛ ChangeNOW).

2. Centralized Exchange Compliance Desks a wobɛdi nkitaho & Polisifoɔ Amanneɛbɔ a wode bɛkɔ¶

Ntɛm ara na wo on-chain trace kyerɛ sika a wowia a ɛrehyɛn Centralized Exchange deposit address anaa instant swapper service mu no:

1. Fa Mmarahyɛ Bagua Freeze Abisadeɛ Tekete a egye ntɛmpɛ kɔ saa nsakraeɛ pɔtee no nkyɛn: Nsesaeɛ kɛseɛ biara yɛ ntɛmpɛ nsisi/sika a wɔawia tekiti kwan (te sɛ Binance Mmarahyɛfoɔ / Sika a wɔawia mmoa, Coinbase Mmoa, Kraken Ahobanbɔ, anaa FixedFloat/ChangeNOW mmoa). Ma:
   • Wo victim wallet address, attacker no ntam address, Deposit Address pɛpɛɛpɛ wɔ exchange, ne Transaction Hash (TxID) a ɛkyerɛ sika a ɛrehyɛn wɔn exchange hot wallet mu.
   • Nsesa dodow no ara de bere tiaa mu nnɔnhwerew 24 kosi 72 mu mmara sodi a wɔde bɛhyɛ mu bɛto sika a wɔde asie akontaabu a wɔde frankaa a ɛyɛ adwenem naayɛ so de ama wo bere de polisifo amanneɛbɔ nɔma a ɛyɛ aban de akɔ so na wɔama ɔpanyin a ɔreyɛ nhwehwɛmu no de email akɔma nsakrae no Mmarahyɛ Bagua Abisade portal (kodexglobal.com anaasɛ exchange no LE portal tẽẽ).
2. Fa ɔman no kɔmputa so nsɛmmɔnedi ho amanneɛbɔ a ɛyɛ aban de kɔma ntɛm ara (100% kwa):
   • United States: Fa amanneɛbɔ kɔma FBI Intanɛt Nsɛmmɔnedi Anwiinwiibea (IC3) ntɛm ara wɔ ic3.gov (paw virtual sika na fa atɔ hash biara, token ticker, USD bo, ne nea ogye sika kotoku address ka ho), bɔ amanneɛ kɔ Secret Service mpɔtam hɔ field office cyber fraud task force, na fa mpɔtam hɔ polisifo amanneɛbɔ kɔma na woanya Case Number a ɛfata.
   • United Kingdom: Fa amanneɛbɔ bi kɔ intanɛt so wɔ Action Fraud wɔ actionfraud.police.uk anaa frɛ 0300 123 2040 sɛnea ɛbɛyɛ a Ɔman Nsisi ho Amanneɛbɔ Dwumadibea ne Polisifo Intanɛt so Nsɛmmɔnedi Dwumadibea no betumi de amanneɛbɔ a ɛfa nsakrae a wɔkora so ho ama.
   • Europa Aman Nkabom, Canada, & Australia: Fael fa Chainabuse (chainabuse.com, a TRM Labs) na ɛyɛ adwuma, a ɛno ara kyɛ wo scammer wallet address amanneɛbɔ wɔ exchanges akɛseɛ, wallet security blacklists, ne mmarahyɛfoɔ ahokafoɔ so, ka Canadian Anti-Fraud Center (CAFC), Australian Cyber ​​Security Center (cyber.gov.au), anaa wo man Europol kɔmputa so nsɛmmɔnedi dwumadibea.

Post-incident decontamination: wo mfiri a wobɛhohoro ne daakye sika kotoku a wobɛma ayɛ den¶

Ansa na wode wo cryptocurrency sika kotoku foforo no bedi dwuma ama da biara da nnwuma no, yi ntini mu mmerɛwyɛ a ɛde apam no bae no fi hɔ:

1. Sɛ wowiaa wo Seed Phrase bere a wode Windows PC anaa Mac redi dwuma a, fa no sɛ wowɔ Infostealer virus: Malware a wɔde asie wɔ atoro game cracks, atoro Zoom/Calendly links, atoro Notion/PDF sponsorships, anaa pirated software mu no kenkan local LevelDB vault files a ɛwɔ browser extensions (MetaMask, Phantom) mu no komm na ɛhwɛ wo clipboard no. Twa PC no fi Wi-Fi, backup nkrataa a ɛnyɛ den nkutoo, na yɛ Windows anaa macOS USB clean reinstall a edi mũ.
2. Fa Hardware Wallet (Cold Storage) a wɔatu ho ama di dwuma ma sikakorabea, ne "Hot Wallet" a ɛyɛ soronko ma da biara da dApps:
   • Vault / Cold Wallet (90%+ sika): Fa wo bere tenten Bitcoin, Ethereum, Solana, ne stablecoins sie hardware sika kotoku a wɔatu ho ama (te sɛ Trezor, Ledger, Coldcard, anaa Keystone) a wɔde kokoam safoa no sie wɔ offline Secure Element chip a ɛnka wo kɔmputa no RAM da mu. Mfa wo Cold Vault address no nkɔ wɛbsaet ahorow a wɔanhyɛ da, NFT mints, anaa airdrops so da.
   • Burner / Hot Wallet (< 10% of funds): Fa browser wallet a ɛyɛ soronko sie a sika ketewaa bi a woayɛ nhyehyɛe sɛ wode bɛsesa anaasɛ wode bɛyɛ mint saa da no nkutoo na ɛwɔ mu. Sɛ wo klik link bɔne bi so da bi wɔ wo Hot Wallet so a, wo Cold Vault no da so ara yɛ 100% a wɔmfa wɔn nsa nka.
3. Fa bere ankasa mu Web3 asɛmdi simulator ntrɛwmu: Nnɛyi sika kotoku te sɛ Rabby Wallet ne Phantom, anaa brawsa ahobammɔ ntrɛwmu a wontua hwee te sɛ Pocket Universe ne Wallet Guard, yɛ asɛm biara ho mfonini ansa na wode wo nsa bɛhyɛ ase na woabɔ kɔkɔbɔ akenkan kɔkɔɔ a ɛhyerɛn: "KƆBƆ: Sɛ wode wo nsa hyɛ nkra yi ase a, ɛbɛma wo USDC ne NFT nyinaa akɔ baabi a wunnye nni address."
4. Mfa wo aba kasasin a ɛwɔ nsɛmfua 12/24 no nsie wɔ dijitaal kwan so da: Mfa wo aba kasasin no smartphone mfonini da (cloud photo backups yɛ ade titiriw a hackers de wɔn ani si so), mfa nsie wɔ password manager, Apple Notes, Google Docs, anaa Draft emails mu da, na nkyerɛw wo aba kasasin no nkɔ wɛbsaet anaa keyboard biara so da. Kyerɛw w’aba kasasin no wɔ honam fam krataa so nkutoo anaasɛ fa stamp gu dade a ɛnyɛ den mprɛte a ogya ntumi nhyew a wɔde asie honam fam sikakorabea so.

Nsɛm a wɔtaa bisa¶

Sources a wɔhwɛɛ mu¶

• Federal Bureau of Investigation (FBI, United States): Intanɛt so Nsɛmmɔnedi Ho Anwiinwii Asoɛe (IC3) Cryptocurrency Nsisi Amanneɛbɔ ne Ɔman Adwumayɛfo Amanneɛbɔ a ɛfa DeFi Smart Contract Drainers ho (ic3.gov).
• Cyber ​​Ahobammɔ ne Nnwuma Ahobammɔ Dwumadibea (CISA, United States) & NSA: Cryptocurrency Ahobammɔ, Phishing-Resistant Authentication, ne Infostealer Malware Afotu (cisa.gov).
• Adetɔfoɔ Sikasɛm Ahobanbɔ Dwumadibea (CFPB) & Federal Trade Commission (FTC, United States): Kwati Crypto Nsisi ne Atoro Sikasɛm Nnwuma (consumer.ftc.gov).
• Ɔman Cyber ​​Ahobammɔ Asoɛe (NCSC) & Adeyɛ Nsisi (United Kingdom): Cryptoasset Ahobammɔ Akwankyerɛ ne Digitals Agyapade a Woawia Ho Amanneɛbɔ (ncsc.gov.uk, . actionfraud.police.uk).
• Ethereum Fapem & EIP Gyinapɛn (Amanaman Ntam): ERC-20 Token Gyinapɛn (EIP-20), Tumi krataa a Gasless Mpeneebɔ (EIP-2612), ne Akontaabu Abstraction / Bundling (ethereum.org, . eips.ethereum.org).
• Ahobanbɔ Apam (SEAL 911) & Flashbots Whitehat Collective (Amanaman Ntam): Ntɛmpɛ Whitehat Sweeper-Bot Nkwagye Protocol ne MEV Atomic Bundling (securityalliance.org, . docs.flashbots.net).

Akwankyerɛ ahorow a ɛfa ho¶

• Data breach mmuae ne password leaks
• MFA phishing ne ɔtamfo-wɔ-mfinimfini bypass
• SIM a wɔde sesa nneɛma
• Nsisi ne nsisi