ʻO ka hoʻoheheʻe kālā Cryptocurrency, nā ʻaelike akamai maikaʻi ʻole, a me ka hoʻololi ʻana i nā huaʻōlelo huaʻōlelo¶
He ʻokoʻa nā helu ulia pōpilikia ma ka ʻāina. Hoʻohana kēia ʻaoʻao i ka 911, ka helu no ʻAmelika a me Kanada. Nui nā ʻāina ʻē aʻe i hoʻohana i ka 112, 999, a i ʻole ka helu ʻē aʻe. E huli i ka helu no kou ʻāina.
ʻO ka ʻike ʻana i kāu pēke cryptocurrency mālama pono iā ʻoe (e like me MetaMask, Rabby, Phantom, Trust Wallet, Coinbase Wallet, a i ʻole kahi ʻeke ʻeke uila e like me Ledger a i ʻole Trezor) ke hoʻoheheʻe ʻia nei i nā hōʻailona a me nā NFT he pilikia pili kālā koʻikoʻi. No ka mea hiki ʻole ke hoʻololi ʻia nā hana blockchain lehulehu ma Ethereum, Bitcoin, Solana, Arbitrum, Base, Polygon, a me BNB Chain i ka manawa i hoʻopaʻa ʻia ai i loko o kahi poloka, ʻo kou hiki ke mālama i nā waiwai i koe e hilinaʻi nui ʻia i kāu hana i nā minuke ʻelima mua.
Hāʻule kēlā me kēia ʻeke kālā cryptocurrency i loko o kekahi o nā ʻano ʻenehana ʻokoʻa ʻelua: a i ʻole ua kau inoa ʻoe i kahi ** ʻae ʻia ʻo ka ʻaelike akamai maikaʻi ʻole a i ʻole ka pūlima Permit2** ma kahi pūnaewele phishing (e hiki ai i ka mea hoʻouka ke huki i nā hōʻailona kikoʻī mai kāu helu wahi * me ka loaʻa ʻole o kāu huaʻōlelo huaʻōlelo), A i ʻole kāu **12-a-24-huaʻōlelo huna huna hua huaʻōlelo / hackboard pūnaewele ponoʻī (ma ke kapuaʻi hoʻopaʻa ʻana, ʻo ia hoʻi kahi kiʻi huna. a i ʻole infostealer virus). ʻO ka ʻike ʻana i ka mea o nā hoʻouka ʻelua e kū nei, e hana ana i kahi ʻeke hoʻopakele maʻemaʻe i hoʻopaʻa ʻia i ka ea ma kahi hāmeʻa i hoʻopaʻa ʻole ʻia, e hoʻopau ana i nā alana hōʻailona palena ʻole, a me ka ʻimi ʻana i nā kālā i ʻaihue ʻia i ka hoʻololi ʻana i waena o nā ramp e hāʻawi iā ʻoe i ka manawa maikaʻi loa e hoʻōki i ka wai a me ka hoʻomaloʻo i nā waiwai ʻaihue.
E hana i kēia i kēia manawa¶
Inā ʻike ʻoe i nā hana hoʻopukapuka ʻole ʻia e hoʻoheheʻe ana i kāu pēke cryptocurrency a i ʻole ʻike ʻoe ua pili wale ʻoe i kahi pūnaewele phishing a i ʻole ka hoʻokahe ʻana i kāu huaʻōlelo huaʻōlelo, e hoʻokō i kēia mau ʻanuʻu ʻeono i ke kauoha pololei:
- Mai hoʻohana i ka lolouila hoʻokahi no ka hana ʻana i kahi ʻeke hoʻopakele hou: Inā loaʻa kāu PC a Mac paha me ka infostealer malware (e like me Lumma Stealer, Atomic macOS Stealer, a i ʻole Poseiden) a i ʻole ka hoʻonui ʻia ʻana o ka polokalamu kele pūnaewele maikaʻi ʻole, e hana ana i kahi ʻeke hou ma kēlā kamepiula hoʻokahi e hāʻawi koke i kāu huaʻōlelo hua hou i ka mea hoʻouka. E ʻohi i kahi ** ʻeke kelepona paʻa maʻemaʻe a maʻemaʻe paha ** no ka hana ʻana i kahi helu helu wahi ʻeke hoʻokipa hou ʻole i kēia manawa.
- E hoʻoili i kāu mau hōʻailona kinoea e ola nei a me nā kālā hiki ke hoʻololi ʻia i ka ʻeke maʻemaʻe hou MUA: Ma mua o ka hana ʻana i kekahi mea ʻē aʻe, e hoʻouna i kāu mau ʻāpana hiki ke hoʻololi ʻia (ETH, BTC, SOL, USDC, USDT, WBTC) mai ka ʻeke ʻeke i hoʻopaʻa ʻia i kāu helu helu maʻemaʻe hou. E waiho wale i kekahi mau dala o ke kinoea maoli (e like me 3 a 5 USD o ETH, SOL, a i ʻole BNB) inā pono ʻoe e hoʻopau i nā ʻae ʻae ʻae akamai no nā kūlana paʻa i koe.
- ** E hoʻoholo inā loaʻa i ka mea hoʻouka kāu huaʻōlelo huaʻōlelo a i ʻole he hōʻailona hōʻino wale nō **:
- Ka hōʻailona o kahi ʻaelike maikaʻi ʻino / ʻae ʻia ʻae2: Hoʻokahi wale nō hōʻailona kikoʻī (e like me ka USDT a i ʻole ka hōʻiliʻili NFT) i huki ʻia ma o
TransferFromma hope o kou kaomi 'ana i ka "Approve" a i 'ole "Sign" ma kahi pūnaewele puni honua, oiai ke koena kinoea ETH/SOL e noho 'ole ana. - Ka hōʻailona o kahi huaʻōlelo i hoʻopaʻa ʻia / kī pilikino: ʻo kēlā me kēia keneta ma waena o nā blockchains like ʻole (Ethereum, Solana, Bitcoin, Arbitrum) ke holoi ʻia nei ma o ka pololei.
Transferkelepona, a ʻaihue ʻia nā ETH/SOL ʻōiwi āu e hoʻouna ai i loko o 1 kekona e ka sweeper bot.
- Ka hōʻailona o kahi ʻaelike maikaʻi ʻino / ʻae ʻia ʻae2: Hoʻokahi wale nō hōʻailona kikoʻī (e like me ka USDT a i ʻole ka hōʻiliʻili NFT) i huki ʻia ma o
- Hoʻopau koke i ka ʻae ʻana i nā hōʻailona ʻaelike akamai nui: Inā mau kāu kinoea ETH/SOL maoli i loko o kāu ʻeke, e wehe i kahi luna ʻae hilinaʻi (
revoke.cash, Etherscan Token Approval Checker maetherscan.io/tokenapprovalchecker, a i ʻole ʻo Rabby Wallet's Approval Manager) a me Revoke i nā ʻae a pau o ka hoʻohana ʻana i nā hōʻailona palena ʻole a me nā pūlima ʻAiʻi2 i hāʻawi ʻia i nā wahi ʻaelike ʻike ʻole. - Hoʻokaʻawale i nā kau dApp ikaika a me nā loulou WalletConnect: E wehe i kāu hoʻonohonoho ʻeke kālā -> Nā Pūnaewele Hoʻohui / WalletConnect Sessions a kaomi i ka Disconnect All i hiki ʻole i ka pūnaewele phishing ke hoʻopuka hou i nā noi pūlima.
- Inā ʻaihue koke ʻo "Sweeper Bot" i ke kinoea āu e waiho ai no ka hoʻopakele ʻana i nā hōʻailona staked, e hoʻohana i kahi pūʻulu hoʻopakele Flashbots / MEV: Mai hoʻomau i ka hoʻouna ʻana i ka ETH i loko o kahi ʻeke i hoʻomalu ʻia e ka bot sweeper, nānā ka palapala automated o ka bot i ka mempool a ʻaihue i kāu ETH i nā milliseconds ma mua o kou hiki ke kaomi "Unstake". Akā, e hoʻohana i kahi lawelawe hoʻopakele **ERC-4337 / Flashbots MEV atomic bundle hoʻopakele ** (e like me
flashbots.netnā mea hana whitehat a i ʻolerevoke.cashnā hiʻohiʻona uku i hāʻawi ʻia) e hoʻolilo i ke kinoea a lawe i nā hōʻailona i loko o kahi poloka un-frontrunnable.
Danger
Ke kau nei ʻoe ma X (Twitter), Discord, Reddit, a i ʻole Telegram i hoʻokahe ʻia kāu ʻeke crypto, e pane mai nā haneli o nā moʻokāki bot automated a i ʻole DM iā ʻoe i loko o 30 kekona e ʻōlelo ana: "Contact @Blockchain_Cyber_Recovery ma Telegram/Instagram, ua hoʻihoʻi ʻo ia i kaʻu USDT i ʻaihue ʻia. 100% fraudulent second scam.* ʻAʻole hiki i ka mea hacker ke hoʻohuli i kahi kālepa blockchain i hoʻopaʻa ʻia. E hoʻopiʻi kēia mau scammers iā ʻoe ma mua o "nā lako polokalamu a i ʻole nā uku kinoea" a hoʻopunipuni paha iā ʻoe i ka hāʻawi ʻana i kāu mau ʻeke kālā i koe.
ʻO ka lāʻau hoʻoholo: hoʻokuʻu i kahi kahe ʻeke crypto ikaika¶
E hāhai i kēia kaʻina hana hoʻokolohua manawa maoli e hoʻopau i ke koko a hoʻopakele i kāu mau waiwai kikohoʻe e ola nei:
flowchart TD
A["ʻIke ʻia nā ʻoihana Crypto i waho ʻole"] --> B["E hana i kahi ʻeke maʻemaʻe hou ma kahi ʻeke maʻemaʻe / ʻeke paʻa paʻa"]
B --> C{"Ua kikokiko paha ʻoe i kāu huaʻōlelo huaʻōlelo 12/24-huaʻōlelo a hoʻoiho paha i kahi faila, a i ʻole kaomi wale i ka Sign/Approve ma kahi pūnaewele?"}
C -->|"Kaomi wale ʻo Sign / Approve / Claim on a dApp"| D["ʻO ka ʻaelike akamai maikaʻi ʻole a i ʻole ka ʻae ʻana i ka wai"]
D --> E["E hele koke i revoke.cash a i ʻole Etherscan Token Approvals a Hoʻopau i nā ʻae ʻino."]
E --> F["E hoʻololi i nā koena wai i kāu ʻeke maʻemaʻe hou i mea e mālama ai"]
C -->|"ʻO ka huaʻōlelo huaʻōlelo i hoʻopaʻa ʻia, i lawe ʻia i ke kī pilikino, a i ʻole i holo i ka polokalamu polokalamu PC"| G["Hua'ōlelo Hua Piha / Kuʻikahi kī pilikino"]
G --> H{"Ke ʻaihue koke nei kahi Sweeper Bot i kekahi kinoea ETH/SOL āu e waiho ai?"}
H -->|"ʻAʻole: Ke hana mau nei ke kinoea maoli"| I["E hoʻoneʻe koke i nā ʻāpana wai a me nā kūlana DeFi i kahi ʻeke maʻemaʻe hou"]
H -->|"ʻAe: ʻaihue ʻo Sweeper Bot i ke kinoea ma < 2 kekona"| J["HOʻOPI i ka hoʻouna ʻana i ke kinoea. E hoʻohana i ka pūʻulu atomika RPC pilikino Flashbots e hoʻopakele i nā hōʻailona staked/airdrop"]
F --> K["E hoʻopaʻa i ka ʻeke hoʻouka kaua ma Block Explorer, e hōʻike iā Exchange Compliance & FBI IC3 / Police"]
I --> K
J --> K
Ka ʻike ʻana i ka vector hoʻouka: Smart Contract Drainer vs. Seed Phrase Compromise¶
I mea e pale ʻole ai i ke kālā hou aʻe i ka wā e hoʻāʻo nei e mālama i kāu ʻeke kālā, pono ʻoe e hoʻomaopopo mua * pehea * ka hoʻoneʻe ʻana o ka mea hoʻouka i kāu kālā ma ka nānā ʻana i kāu helu ʻeke kālā ma kahi mea ʻimi poloka lehulehu (etherscan.io, solscan.io, arbiscan.io, basescan.org, a i ʻole mempool.space).
ʻO ka hoʻohālikelike ʻana i nā mīkini hoʻoheheʻe kālā cryptocurrency nui 4¶
| Mechanism Hoouka | Pehea i hoʻopunipuni ʻia ai ka mea ʻeha | He aha ia ma ka Block Explorer | Ua puhi mau ʻia ka helu wahi kālā? |
|---|---|---|---|
1. ERC-20 palena ʻole approve() / increaseAllowance() |
Ua kaomi ka mea i pepehi ʻia "Apono" ma kahi mokulele hoʻopunipuni, Uniswap hoʻopunipuni, a i ʻole pūnaewele phishing, e hāʻawi ana i ka ʻae ʻana o ka mea hoʻouka e hoʻolilo. Unlimited o kahi hōʻailona kikoʻī. |
ʻIke ʻoe i kahi Approve ʻoihana i pūlima ʻia e ʻoe, a ma hope mai a TransferFrom kelepona i hoʻomaka ʻia e ka Attacker's Address e huki ana i kēlā hōʻailona kikoʻī. |
ʻAʻole. Ke **Hoʻopau ** i ka ʻae ʻia ma revoke.cash, ʻaʻole hiki i ka mea hoʻouka ke hoʻopā hou i kēlā hōʻailona. |
2. Hoʻopaʻa Paʻa ʻole Gas Permit / Permit2 Kaulima (EIP-2612) |
Ua kaomi ʻo Victim iā "Sign" ma kahi memo pop-up hoʻopunipuni e like me ka hōʻoia hoʻopaʻa inoa ʻole, me ka ʻole o ka uku ʻana i ka uku kinoea. | ʻIke ʻoe i ka zero ka ʻae ʻana mai kāu ʻeke kālā; akā, waiho ka ʻaelike drainer i kāu cryptographic i pūlima ʻia Permit memo a hoʻokahe i kāu mau hōʻailona ERC-20 i hoʻokahi kapuaʻi. |
** ʻAʻole **, inā ʻoe e **Hoʻopau koke i ka Uniswap Permit2 haʻawina haku a i ʻole ʻae hōʻailona kikoʻī ma revoke.cash. |
3. Solana Assign / Lawe ʻia ka mana moʻokāki a i ʻole ka hoʻoili lehulehu |
Ua ʻae ka mea i hoʻopaʻi ʻia i kahi kālepa Solana hōʻino ma kahi kahua mint Phantom/Solana hoʻopunipuni kahi i hūnā ʻia ai ka hoʻohālikelike ʻana. | A i ʻole ua hoʻoili ʻia nā hōʻailona SPL a me SOL i loko o kahi ʻōlelo aʻo i hui pū ʻia, A I ʻole ua hoʻihoʻi ʻia ka Owner Authority o kāu moʻokāki hōʻailona i ka drainer. | Inā hoʻihoʻi ʻia ka Mana Mana Pūnaewele ma Solana, ua mālama ʻia kēlā moʻokāki kikoʻī e ka mea hoʻouka; e hoʻoneʻe i nā waiwai e ola nei i kahi pakeke hou. |
| 4. Huaʻōlelo Hua / ʻaihue kī pilikino (Infostealer a i ʻole Phishing) | Ua paʻi ʻo Victim i kā lākou mau huaʻōlelo 12/24 i loko o kahi pūnaewele hoʻopunipuni ("Verify Ledger / MetaMask"), mālama i kahi kiʻi paʻi o kā lākou hua ma Google Photos/iCloud, a i ʻole e holo i ka malware ma Windows/macOS. | pololei pololei Transfer o ETH maoli, BTC, SOL, a me nā hōʻailona ma waena o mau kaulahao he nui, i kiaʻi pinepine ʻia 24/7 e kahi Sweeper Bot. |
YES , 100% PERMANENTLY BURNED. Mai hoʻohana hou i kekahi helu wahi i loaʻa mai kēia huaʻōlelo huaʻōlelo. |
Kūkākūkā 1: Hoʻopau i kahi ʻaelike akamai ʻino a i ʻole Permit2 Hoʻoheheʻe wai¶
Ke kamaʻilio nei ʻoe me nā protocols decentralized finance (DeFi) ma Ethereum a me EVM-compatible blockchains (Arbitrum, Optimism, Base, Polygon, Avalanche, BNB Chain), nā hōʻailona e like me USDC, USDT, DAI, PEPE, a i ʻole WETH e hoʻohana i ka ERC-20 standard. Ma ka hoʻolālā ʻana, ʻaʻole hiki i kahi ʻaelike akamai ke hoʻoneʻe i nā hōʻailona ERC-20 mai kāu ʻeke ke ʻole ʻoe e hāʻawi mua iā ia i Allowance. ʻO nā pahu phishing ("Drainers-as-a-Service" e like me Angel Drainer, Pink Drainer, a i ʻole Inferno Drainer) e hoʻopunipuni i nā mea hoʻohana i ka hāʻawi ʻana i kahi Ala ʻAʻole palena ʻole (115792089237316195423570985008687907853269984665640564039457584007913129639935 units) a i ʻole ke kau inoa ʻana i kahi kaulahao waho EIP-2612 Permit / Uniswap Permit2 leka pololei i ka ʻaelike a ka scammer.
Pehea e hoʻopau ai i nā ʻae hōʻailona hōʻino i 60 kekona¶
- Wehe i kahi mea hana pono, kūʻokoʻa no ka hoʻopau ʻana i ka ʻae ʻana:
- Revoke.cash (
revoke.cash), Kākoʻo ma luna o 100 EVM blockchains a hōʻike i ka maʻamau ERC-20/ERC-721 apono aPermit2nā pūlima me nā lā pau. - Block Explorer Official Apono Checkers:
- Ethereum:
etherscan.io/tokenapprovalchecker - ʻO ke kaulahao BNB:
bscscan.com/tokenapprovalchecker - Polygon:
polygonscan.com/tokenapprovalchecker - Arbitrum:
arbiscan.io/tokenapprovalchecker - Kumu:
basescan.org/tokenapprovalchecker
- Ethereum:
- Rabby Wallet Built-in Security Tab: Inā ʻoe e hoʻohana iā Rabby Wallet, e kaomi i ka Approvals ikona pale ma loko pono o ka pākēkē e hoʻopau i nā ʻaelike pilikia me ka wehe ʻole ʻana i kahi ʻaoʻao pūnaewele.
- Revoke.cash (
- E hoʻokaʻawale i nā ʻae ʻia e ka "Nā Hou" a i ʻole "Waiwai i ka pilikia":
- E nānā i ke kolamu Spender. E hōʻike nā protocols kūpono i nā lepili i hōʻoia ʻia e like me
Uniswap: Universal Routera i ʻoleAave: Pool V3. - Hōʻike pinepine ʻia nā wai hoʻoheheʻe ʻino ma ke ʻano he ** helu helu hexadecimal maka i hōʻoia ʻole ʻia** (e laʻa.
0x4f8a...9c12) a i ʻole he ʻaelike hoʻopunipuni i kau ʻia nei.
- E nānā i ke kolamu Spender. E hōʻike nā protocols kūpono i nā lepili i hōʻoia ʻia e like me
- ** Kaomi iā "Revoke" a hōʻoia i ke kālepa ma kāu ʻeke**:
- Ke kaomi ʻana iā Revoke e hoʻouna i kahi kālepa ma ke kaulahao e hoʻihoʻi i ka ʻae ʻana o ka mea lilo i
0. - Ke hōʻoia ʻia kēlā hana ma ka blockchain (maʻamau i loko o 2 a 12 kekona), ua ʻoki ʻia ka ʻaelike drainer mai kāu ʻeke a ʻaʻole hiki ke huki hou i kahi keneta hou o kēlā hōʻailona.
- Ke kaomi ʻana iā Revoke e hoʻouna i kahi kālepa ma ke kaulahao e hoʻihoʻi i ka ʻae ʻana o ka mea lilo i
Warning
E makaʻala i nā loulou phishing "Hoʻopau" hoʻopunipuni ma nā hoʻolaha ʻenekini huli. Kūʻai mau nā Cybercriminals i nā hoʻolaha hulina kākoʻo no nā huaʻōlelo e like me "hoʻopau kālā" a i ʻole "etherscan token revoke" e alakaʻi i nā kikowaena like (revokecash-app.com). Ke kaomi ʻoe iā "Revoke" ma kahi kahua hoʻokuʻu hoʻopunipuni, noi maoli ka pop-up iā ʻoe e hoʻopaʻa inoa i kahi uku hoʻoili wai hou. E hōʻoia mau i ka URL pololei (revoke.cash a i ʻole etherscan.io) a heluhelu i ka simulation kālepa i loko o kāu pēke pop-up e hōʻoia i ke kau ʻia ʻana o ka haʻawina i 0.
Kūkākūkā 2: E lanakila ana i kahi "Sweeper Bot" ma kahi huaʻōlelo huaʻōlelo i hoʻopaʻa ʻia.¶
Inā ʻaihue kekahi hacker i kāu 12-huaʻōlelo a i ʻole 24-huaʻōlelo hoʻolaʻa hua huaʻōlelo (a i ʻole kī pilikino maka), hoʻouka koke lākou i kāu kī pilikino i loko o kahi palapala kikowaena i kapa ʻia ʻo Sweeper Bot.
Pehea e pahele ai ka Sweeper Bot i ka poʻe pōʻino¶
Inā paha he $15,000 ka waiwai o kāu pēke Ethereum i hoʻopaʻa ʻia i loko o kahi ʻaelike Aave, Lido, a i ʻole EigenLayer (a i ʻole he hōʻailona hōʻailona hōʻailona e hiki mai ana), A i ʻole e paʻa ana i kahi hōʻailona ERC-20 ʻaʻole i neʻe ka mea hoʻouka, akā ua holoi ka mea hoʻouka i kāu ** koena ETH ʻōiwi 0.0000 ETH.
- No ka wehe ʻana a i ʻole ka hoʻololi ʻana i kāu \(15,000 o nā hōʻailona i kahi palekana, pono kāu ʻeke i hoʻopaʻa ʻia i ka **\)2.00 waiwai o ETH e uku i ka uku kinoea pūnaewele blockchain**.
- Hoʻouna ʻoe i $5.00 o ka ETH mai kāu moʻokāki Coinbase i kāu ʻeke kālā i hiki iā ʻoe ke kaomi "Unstake".
- **Ma loko o 0.8 kekona o kāu $5.00 ETH waihona pae **, ma mua o kou mau manamana lima kanaka hiki ke kaomi i ke pihi "Unstake", ka hacker's automated Sweeper Bot ike i ka ETH komo mai i loko o ka lehulehu mempool a ho'ā koke i ka hana kinoea kiʻekiʻe-priority e aihue i kou $5.00 o ka hacker 'ōlelo a hoʻi i waho i ka hacker.
- Ho'āʻo pinepine ka poʻe pōʻino i ka hoʻouna ʻana i ka ETH 10 mau manawa i ka lālani, e nalowale ana $50 a i ʻole $100 i ke kinoea i ka Sweeper Bot i kēlā me kēia manawa ʻoiai e paʻa ana kā lākou mau hōʻailona staked i loko o ka ʻeke ʻeke.
Pehea e lanakila ai i kahi Sweeper Bot me ka hoʻohana ʻana i Flashbots / Private MEV Atomic Bundles¶
E ho'ōki i ka hoʻouna ʻana i nā waihona ETH maʻamau i kahi ʻeke i nānā ʻia e kahi Sweeper Bot. Nānā nā bots Sweeper i ka mempool kālepa lehulehu a pono i 1 poloka (a i ʻole kahi kālepa lehulehu e kali nei) e ʻike a ʻaihue i kāu ETH i waiho ʻia. Hiki iā ʻoe ke lanakila i kekahi Sweeper Bot ma ka hoʻohana ʻana i Flashbots Protect / MEV Atomic Bundling (ma nā kaulahao Ethereum a me EVM) a i ʻole Jito Bundles (ma Solana):
- Pehea e hana ai ka Atomic Rescue Bundle: Ma kahi o ka hoʻouna ʻana iā ETH ma Block #1 a e hoʻāʻo e kaomi i ka "Transfer/Unstake" ma Block #2, ua hoʻopili ʻia kahi pūʻolo atomic **ʻelua mau hana kūʻokoʻa i loko o kahi hui pilikino hoʻokahi ** i hoʻouna pololei ʻia e poloka i nā mea kūkulu hale ma o kahi Private RPC (ʻike ʻole ʻia e ka mempool lehulehu kahi e nānā ai): Sweeper Bot
- Hui Puʻupuʻu #1 (mai kāu ʻeke Paʻa Paʻa Maʻemaʻe): Hoʻouna i ke kinoea pololei (
0.0015 ETH) i ka Wallet Compromised. - Bundle Transaction #2 (kaulima mua ʻia e ka Wallet Compromised): Hoʻokō koke i ka
unstake()a i ʻoletransfer()o kāu mau hōʻailona koʻikoʻi i kāu Wallet Safe Maʻemaʻe, e ʻai ana i ka 100% o ia mea0.0015 ETHkinoea i loko o ka pololei like loa ma ka microsecond like loa.
- Hui Puʻupuʻu #1 (mai kāu ʻeke Paʻa Paʻa Maʻemaʻe): Hoʻouna i ke kinoea pololei (
- ** Ma muli o ka hana ʻana o nā hana ʻelua i loko o ka poloka hoʻokahi me ka ʻike ʻole ʻana o ka lehulehu **, ʻaʻole ʻike ka Sweeper Bot o ka mea hacker i ka hōʻea ʻana a haʻalele me ka ETH.
0.0000 ETHkoe i ka wā e pae maluhia ai kāu mau hōʻailona ma kāu ʻeke maʻemaʻe. - ** Nā kumuwaiwai Hoʻopakele Whitehat hilinaʻi no ka poʻe i loaʻa i ka Sweeper Bot **:
- Seal 911 (Security Alliance Whitehat Emergency Hotline): Hana ʻia e Paradigm a alakaʻi i nā mea noiʻi palekana blockchain. Inā he mau kālā koʻikoʻi kāu i hoʻopaʻa ʻia ma hope o kahi sweeper bot a i ʻole ka hoʻohana ʻana i kahi ʻaelike akamai ikaika, e hoʻokaʻaʻike i ka mana i hōʻoia ʻia SEAL 911 bot ma
seal911.org(a ma o kā lākou loulou Telegram masecurityalliance.org) no ke kōkua puʻupuʻu hoʻopakele whitehat MEV manuahi. - Flashbots Whitehat Rescue Documentation: Nā palapala wehe-kumu (
flashbots/searcher-sponsored-tx) madocs.flashbots.netʻae iā ʻoe e kākoʻo i ke kinoea mai kahi ʻeke maʻemaʻe e hoʻopakele i nā waiwai ERC-20/ERC-721 mai kahi kī i hoʻohālikelike ʻia me ka ʻole o ke kākau ʻana i nā code maʻamau. - EIP-7702 / Nā mea hana kinoea i hāʻawi ʻia: Hoʻohui ʻia nā pono hoʻopakele hou i nā mea hana like
revoke.cashA ʻae ʻo Ambire/Rabby e uku i ka hoʻokuʻu ʻana a i ʻole hoʻopakele kinoea mai kahi ʻeke lua.
- Seal 911 (Security Alliance Whitehat Emergency Hotline): Hana ʻia e Paradigm a alakaʻi i nā mea noiʻi palekana blockchain. Inā he mau kālā koʻikoʻi kāu i hoʻopaʻa ʻia ma hope o kahi sweeper bot a i ʻole ka hoʻohana ʻana i kahi ʻaelike akamai ikaika, e hoʻokaʻaʻike i ka mana i hōʻoia ʻia SEAL 911 bot ma
Kūkākūkā 3: Ka ʻimi ʻana i nā kālā ʻaihue, ka hoʻololi ʻana i ka hoʻoilo ma waho o nā ramp, a me ka hōʻike ʻana i ke kānāwai.¶
ʻOiai ʻaʻole hiki i kekahi ke hoʻohuli i kahi kālepa ma kahi blockchain decentralized, ** makemake ka poʻe cybercriminals e hoʻohuli i ka crypto i ʻaihue ʻia i ke kālā hoʻolimalima a i ʻole nā stablecoins maʻemaʻe **. Ke hoʻopaʻa ʻia nā kālā ʻaihue i kahi Centralized Exchange (CEX) (e like me Binance, Coinbase, Kraken, OKX, Bybit, a i ʻole KuCoin) a i ʻole e paʻa i loko o nā stablecoins centralized (Tether / USDT a me Circle / USDC), hiki ke hoʻopaʻa ʻia kēlā mau kālā e ka mea hoʻopuka a i ʻole hui hoʻololi inā e hana wikiwiki ʻoe a waiho i kahi hōʻike kānāwai.
1. ʻO ka huli ʻana ma ke kaulahao a me ka hoʻokuʻu ʻana i ka stablecoin¶
- Kopi i ka Hash Transaction (
TxID) a me ka ʻōlelo a ka Attacker's Receiving Address: E wehe i ka mea ʻimi poloka no kāu kaulahao, e kope i ka hash kūʻai pololei o ka ʻaihue, a kaomi i ka helu wahi kālā loaʻa i loaʻa kāu kālā. - Mai holoi i kāu mōʻaukala polokalamu kele pūnaewele a i ʻole nā moʻolelo ʻeke kālā: Pono nā mea noiʻi forensic i ka URL phishing pololei āu i kipa ai a me nā hōʻailona manawa pololei.
- ** Ina nui ka nui o
USDT(Tether) a i ʻoleUSDCUa ʻaihue ʻia (Circle)**: ʻAʻole e like me ka decentralized ETH a i ʻole BTC, ʻo Tether (USDT) a me Poai (USDC) loaʻa kahi hana ʻaelike akamai i kūkulu ʻia (addBlackList()/blacklist()) hiki iā ke hoʻopaʻa paʻa i ka USDT a i ʻole USDC i ʻaihue ʻia i loko o ka ʻeke mālama ponoʻī o ka mea hacker ma ka loaʻa ʻana o kahi noi hoʻokō kānāwai a i ʻole ke kauoha ʻaha hoʻokolokolo. - Mālama i kahi e hoʻoneʻe ai ka mea hacker i ke kālā me ka hoʻohana ʻana i nā tracer ʻike manuahi:
- Hoʻopili i ka helu ʻeke kālā o ka mea hacker i loko o MetaSleuth (
metasleuth.io), MistTrack (misttrack.io), Paʻi palaoa (breadcrumbs.app), a i ʻole Arkham Intelligence (platform.arkhamintelligence.com). - E hoʻonohonoho i kahi Etherscan / Solscan Watch Alert manuahi ʻole ma ka helu ʻeke kālā o ka mea hacker i loaʻa iā ʻoe ka leka uila i ka manawa e hoʻouna ai ka mea hacker i nā kālā i ʻaihue ʻia i kahi helu waihona waihona Centralized Exchange (no ka laʻana, kahi helu i kapa ʻia.
Binance 14,OKX,FixedFloat, a i ʻoleChangeNOW).
- Hoʻopili i ka helu ʻeke kālā o ka mea hacker i loko o MetaSleuth (
2. Hoʻokaʻaʻike i nā keʻena hoʻokō Centralized Exchange & Hoʻopaʻa ʻana i nā hōʻike makai¶
I ka manawa koke e hōʻike ai kāu ʻili kaulahao i nā kālā ʻaihue e komo ana i kahi helu waihona waihona Centralized Exchange a i ʻole lawelawe swapper koke:
- E hoʻouna i kahi Ticket Noi Hoʻopaʻa Law Enforcement Freeze i kēlā hoʻololi kikoʻī: Ke hana nei kēlā me kēia hoʻololi nui i kahi puka puka tiketi hoʻopunipuni hoʻopunipuni / kālā ʻaihue (e like me ke kākoʻo Binance Law Enforcement / Stolen Funds, Kākoʻo Coinbase, Kraken Security, a i ʻole kākoʻo FixedFloat/ChangeNOW). Hāʻawi:
- ʻO ka helu wahi o kāu ʻeke peke, nā helu waena o ka mea hoʻouka kaua, ka Deposit Address at the exchange, a me ka Transaction Hash (
TxID) e hōʻike ana i nā kālā e komo ana i kā lākou ʻeke wela hoʻololi. - ʻO ka hapa nui o nā hoʻololi e waiho i kahi 24-a-72-hola hoʻopaʻa hoʻokō kūloko ma nā waihona waihona i hōʻailona ʻia e hāʻawi iā ʻoe i manawa e hoʻouka ai i kahi helu hōʻike mākaʻi kūhelu a e leka uila i ka luna noiʻi i ka portal o Law Enforcement Request portal (
kodexglobal.comaiʻole ka puka LE pololei o ka hoʻololi).
- ʻO ka helu wahi o kāu ʻeke peke, nā helu waena o ka mea hoʻouka kaua, ka Deposit Address at the exchange, a me ka Transaction Hash (
- E hoʻopaʻa koke i nā hōʻike pili i ka cybercrime aupuni (100% manuahi):
- ** ʻAmelika Hui Pū ʻIa **: E waiho i kahi hōʻike koke me ka FBI Internet Crime Complaint Center (IC3) ma
ic3.gov(E koho i ke kālā virtual a hoʻokomo i kēlā me kēia hana hash, token ticker, ka waiwai USD, a me ka helu wahi ʻeke kālā loaʻa), e hōʻike i ka Secret Service local field office cyber fraud task force, a waiho i kahi hōʻike mākaʻi kūloko no ka loaʻa ʻana o kahi Helu hihia. - United Kingdom: Waiho i kahi hōʻike pūnaewele me Action Fraud ma
actionfraud.police.uka i ʻole e kelepona iā 0300 123 2040 i hiki i ka National Fraud Intelligence Bureau a me Police Cyber Crime Unit ke hoʻopuka i kahi leka hoʻolaha hoʻololi. - European Union, Canada, & Australia: File ma o Chainabuse (
chainabuse.com, hoʻohana ʻia e TRM Labs), nāna e kaʻana like i kāu hōʻike helu helu peke scammer ma waena o nā hoʻololi nui, nā papa inoa ʻeleʻele palekana o ka peke, a me nā hoa hoʻokō kānāwai, me ka Canadian Anti-Fraud Center (CAFC), Australian Cyber Security Center (cyber.gov.au), a i ʻole kāu ʻāina Europol pākaukau cybercrime.
- ** ʻAmelika Hui Pū ʻIa **: E waiho i kahi hōʻike koke me ka FBI Internet Crime Complaint Center (IC3) ma
Decontamination ma hope o ka hanana: hoʻomaʻemaʻe i kāu mau mea hana a hoʻopaʻakikī i nā ʻeke kālā e hiki mai ana¶
Ma mua o ka hoʻohana ʻana i kāu pēke cryptocurrency hou no nā hana i kēlā me kēia lā, e hoʻopau i ka nāwaliwali o ke kumu i kumu ai ka ʻae ʻana:
- Inā ʻaihue ʻia kāu ʻōlelo Huaʻōlelo i ka hoʻohana ʻana i ka Windows PC a i ʻole Mac, manaʻo ʻoe he Infostealer virus: Malware huna ʻia i loko o nā māwae pāʻani hoʻopunipuni, nā loulou Zoom/Calendly hoʻopunipuni, kākoʻo notion/PDF hoʻopunipuni, a i ʻole nā polokalamu pirated e heluhelu leʻaleʻa i nā faila LevelDB vault o nā hoʻonui polokalamu kele pūnaewele (MetaMask, Phantom) a me ka nānā ʻana i kāu clipboard. E hoʻokaʻawale i ka PC mai ka Wi-Fi, e hoʻihoʻi i nā palapala maʻamau wale nō, a e hana i kahi ** hoʻokomo hou ʻana maʻemaʻe USB piha o Windows a i ʻole macOS**.
- E hoʻohana i kahi Wallet Hardware i hoʻolaʻa ʻia (Cold Storage) no ka mālama kālā, a me kahi "Hot Wallet" ʻokoʻa no nā dApps i kēlā me kēia lā:
- Vault / Cold Wallet (90%+ o nā kālā): E mālama i kāu mau Bitcoin, Ethereum, Solana, a me nā stablecoins no ka wā lōʻihi ma kahi ʻeke ʻeke paʻa i hoʻolaʻa ʻia (e like me Trezor, Ledger, Coldcard, a i ʻole Keystone) kahi i mālama ʻia ai ke kī pilikino i loko o kahi puʻupuʻu Secure Element offline ʻaʻole e hoʻopā i ka RAM o kāu kamepiula. Mai hoʻopili i kāu helu wahi Cold Vault i nā pūnaewele puni honua, NFT mints, a i ʻole nā ea.
- Burner / Hot Wallet (< 10% o nā kālā): E mālama i kahi ʻeke polokalamu kele pūnaewele ʻokoʻa me ka liʻiliʻi o nā kālā āu e manaʻo ai e hoʻololi a mint me kēlā lā. Inā ʻoe e kaomi i kahi loulou ʻino ma kāu Hot Wallet, e noho mau ana kāu Cold Vault 100% ʻaʻole paʻa.
- E hoʻouka i kahi hoʻonui simulator kālepa Web3 manawa maoli: ʻO nā ʻeke kālā hou e like me Rabby Wallet a me Phantom, a i ʻole nā mea hoʻonui palekana polokalamu kele pūnaewele e like me Pocket Universe a me Wallet Guard, e hoʻohālikelike i kēlā me kēia kālepa * ma mua o kou kau inoa ʻana a hoʻopuka i kahi heluhelu ʻulaʻula ʻulaʻula: **"WARNING: E hoʻoheheʻe i kāu mau helu USDC a me NFT ke kau inoa ʻana i kāu mau helu USDC a me NFT."
- Mai hoʻopaʻa i kāu huaʻōlelo hua huaʻōlelo 12/24 ma ke kikohoʻe: Mai lawe i ke kiʻi atamai o kāu huaʻōlelo huaʻōlelo (ʻo ke kākoʻo kiʻi ao ka pahuhopu nui no ka poʻe hackers), ʻaʻole e mālama iā ia i loko o kahi mana password, Apple Notes, Google Docs, a i ʻole Draft leka uila, a mai paʻi i kāu huaʻōlelo huaʻōlelo i loko o kekahi pūnaewele a i ʻole keyboard. E kākau wale i kāu huaʻōlelo huaʻōlelo ma ka pepa kino a i ʻole e hoʻopaʻa iā ia ma luna o nā pā kila ʻili ahi i mālama ʻia i loko o kahi palekana kino.
Nīnau pinepine¶
If I revoke a malicious smart contract approval on revoke.cash, is my wallet safe to keep using, or do I need a brand-new wallet?
If you are 100 percent certain that you only clicked "Approve" or "Sign" inside a normal dApp browser pop-up and **never** typed your 12-to-24-word seed phrase, exported your private key, or downloaded malicious software onto your computer, then revoking the malicious token approvals at `revoke.cash` stops the smart contract drainer completely. However, because creating a fresh wallet address is free, security researchers still recommend generating a brand-new seed phrase on a clean device and moving your remaining funds to the new address just in case you missed an obscure approval on another chain.
How could my Ledger or Trezor hardware wallet get drained if I never typed my 24-word seed phrase online?
A hardware wallet can be drained without leaking the 24-word seed phrase if the owner is tricked into **blind-signing a malicious smart contract transaction (`approve` or `Permit2`) directly on the physical hardware wallet buttons**. Remember: a hardware wallet keeps your private keys offline, so no virus can steal your keys by itself, but if a phishing website sends a malicious contract call to your Ledger or Trezor and you physically press both buttons on the device to "Approve" it, the hardware wallet faithfully signs the thief's transaction. Only the specific token/chain you approved is affected; your other accounts and Bitcoin on that hardware wallet remain safe once you revoke the bad contract approval.
Someone in my DMs or comments says they used a "blockchain recovery specialist" or ethical hacker to get their stolen crypto back. Is that real?
No, it is 100 percent a scam. Criminal syndicates use networks of thousands of automated bot accounts on X (Twitter), YouTube, Reddit, Discord, and Telegram that scan for words like "drained", "scammed", "MetaMask", or "stolen" and immediately post fake testimonials praising a fake recovery hacker. No individual, hacker, or private company can reverse a blockchain transaction or hack a scammer's wallet back. Only law enforcement agencies working with centralized exchanges (like Binance or Coinbase) or stablecoin issuers (Tether/Circle) have the legal power to freeze stolen funds.
Can I claim stolen cryptocurrency from a wallet drain or phishing attack as a tax loss deduction?
Tax treatment of stolen cryptocurrency depends on your country and how the theft occurred. In the United States, under current Internal Revenue Service (IRS) guidance (such as Chief Counsel Advice 202302011 and IRC Section 165), personal casualty and theft losses are generally restricted unless connected to a transaction entered into for profit (IRC Section 165(c)(2)), which is an active area of tax guidance. In the United Kingdom (HMRC `CRYPTO22250` Negligible Value / Theft rules), Canada (CRA), and Australia (ATO capital loss rules on lost/stolen crypto), specific documentary proof (blockchain transaction hashes, wallet ownership proof, and an official police report number) is required. Always save your full block explorer `CSV` export and police report for a qualified crypto CPA or tax advisor.
What is "Address Poisoning" (Zero-Value Transfer Spoofing) and how does it steal crypto?
In an **Address Poisoning** attack, your wallet has NOT been hacked at all. Instead, when you send a legitimate transaction to a friend or exchange address (for example, `0xAb12...89Ef`), a scammer's bot uses a vanity address generator to create a fake wallet address that has the **exact same first 4 to 6 characters and last 4 to 6 characters** (`0xAb12...89Ef`), and sends a `0 USDT` or tiny dust transaction to your wallet so their lookalike address appears at the top of your wallet's "Recent Transaction History". They hope that the next time you send money, you will lazily copy-and-paste the address from your recent transaction history without checking the middle 30 characters. Never copy destination addresses from your transaction history; always use a saved Address Book contact or verify the entire 42-character string.
What should I do if I still have an upcoming claimable token airdrop or locked staking timer expiring in 7 days inside a compromised wallet?
Do not wait until the exact minute the staking timer or airdrop claim opens to try clicking it manually, the attacker's Sweeper Bot is already programmed to claim and steal the tokens in the exact millisecond the unlock block arrives. Instead, reach out at least 24 to 48 hours **before** the unlock timer expires to a verified whitehat rescue team such as **SEAL 911 (`seal911.org`)** or set up a **Flashbots MEV rescue bundle** rigged to execute in the very first block of the unlock height with a competitive builder priority bribe so your whitehat bundle beats the attacker's bot.
Nānā ʻia nā kumu¶
- Ke Keʻena ʻImi ʻAmelika Hui Pū ʻIa (FBI, ʻAmelika Hui Pū ʻIa): Ke kikowaena hoʻopiʻi hewa i ka Internet (IC3) nā hōʻike hoʻopunipuni Cryptocurrency a me nā hoʻolaha lawelawe aupuni ma DeFi Smart Contract Drainer (
ic3.gov). - Cybersecurity and Infrastructure Security Agency (CISA, United States) & NSA: Cryptocurrency Security, Phishing-Resistant Authentication, a me Infostealer Malware Advisories (
cisa.gov). - ** Keʻena Palekana Waiwai Kūʻai (CFPB) & Komisina Kālepa Federal (FTC, ʻAmelika Hui Pū ʻIa)**: Ke pale aku nei i nā Crypto Scams a me nā lawelawe Hoʻoponopono Hoʻopunipuni (
consumer.ftc.gov). - National Cyber Security Center (NCSC) & Action Fraud (United Kingdom): Cryptoasset Security Guidance and Reporting Stolen Digital Assets (
ncsc.gov.uk,actionfraud.police.uk). - Ethereum Foundation & EIP Standards (International): ERC-20 Token Standard (EIP-20), Apono Gasless (EIP-2612), a me Account Abstraction / Bundling (
ethereum.org,eips.ethereum.org). - Security Alliance (SEAL 911) & Flashbots Whitehat Collective (International): Emergency Whitehat Sweeper-Bot Rescue Protocols and MEV Atomic Bundling (
securityalliance.org,docs.flashbots.net).