Skip to content

Drain ya portefeuille ya cryptocurrency, ba contrats intelligents ya mabe, mpe compromis ya phrase ya mboto

Emergency numbers differ by country. This page uses 911, the number for the United States and Canada. Many other countries use 112, 999, or another number. Find the number for your country.

Koyeba ete portefeuille na yo ya cryptocurrency oyo ozali komibatela (lokola MetaMask, Rabby, Phantom, Trust Wallet, Coinbase Wallet, to portefeuille matériel lokola Ledger to Trezor) ezali activement ko drainer ba jetons mpe ba NFTs ezali urgence financière numérique aiguë, deuxième par seconde. Lokola ba transactions publiques ya blockchain na Ethereum, Bitcoin, Solana, Arbitrum, Base, Polygon, mpe BNB Chain ezali cryptographiquement irreversible mbala moko confirmé na bloc, makoki na yo ya kobomba ba biens nionso oyo etikali etali mobimba oyo osalaka na miniti mitano ya liboso.

Drain nionso ya portefeuille ya cryptocurrency ekweyi na moko ya ba catégories techniques mibale ekeseni: soit o signaki approbation ya contrat intelligent ya mabe to signature ya Permit2 na site internet ya phishing (oyo epesaka permettre na attaquant abenda ba jetons spécifiques na adresse na yo sans azala na phrase ya seed na yo), OU **phrase na yo ya 12 à 24 mots secret recovery seed / clé privée yango moko ezalaki na likama (na nzela ya site ya portefeuille ya lokuta, logiciel ya mabe ya tableau de bord, hack ya sauvegarde ya cloud, to virus ya infostealer). Koyeba soki nini kati na ba attaques mibale ezali kosalema, kosala portefeuille ya rescue ya peto oyo ezali na ba espaces ya mopepe na appareil oyo ezali na compromis te, ko annuler ba indemnités ya jeton illimité, mpe ko tracer ba fonds oyo bayibaki na ba off-ramps centralisées ya échange epesaka yo chance ya malamu ya kopekisa drain mpe ko congeler ba biens oyo bayibi.

Sala boye sikoyo

Soki omoni ba transactions ya sortie oyo epesami ndingisa te ezali ko drainer portefeuille na yo ya cryptocurrency to omoni que owuti ko connecter na site ya phishing to o fuite phrase ya seed na yo, sala ba étapes oyo motoba na ordre exact:

  1. Kosalela ordinateur moko TE mpo na kobimisa portefeuille ya sika ya kobikisa: Soki PC to Mac na yo ezali na ba malware infostealer (lokola Lumma Stealer, Atomic macOS Stealer, to Poseiden) to extension ya navigateur ya mabe, kosala portefeuille ya sika na ordinateur wana kaka epesaka mbala moko phrase na yo ya sika ya mboto na attaqueur. Bozwa smartphone to portefeuille matériel oyo ekabwani, ya peto mpo na kosala adresse ya portefeuille ya destination ya sika, oyo ezali na compromis te sikoyo.
  2. Kotinda ba jetons na yo ya gaz natif oyo etikali mpe ba mbongo ya bibende oyo ekoki kopesama na portefeuille ya sika ya peto LIBOSO: Yambo ya kosala eloko mosusu, tinda ba mbongo na yo ya bibende oyo etikali oyo ekoki kopesama (ETH, BTC, SOL, USDC, USDT, WBTC) uta na portefeuille oyo ezali na likama mbala moko na adresse na yo ya sika ya portefeuille propre. Tika kaka mwa ba dollars ya gaz natif (lokola 3 à 5 USD ya ETH, SOL, to BNB) soki esengeli olongola ba ndingisa ya contrat intelligent na ba positions oyo etikali oyo ekangami.
  3. Boyeba soki mobundi azali na Phrase ya Momboto na yo to kaka Approuval ya Token ya Malicious:
    • Ssign ya Contrat intelligent ya mabe / Approval ya Permit2: Kaka jeton moko ya spécifique (lokola USDT to collection ya NFT) nde ebendamaki via TransferFrom nsima ya kofina "Ndima" to "Sinya" na site internet moko, nzokande solde ya gaz na yo ya ETH/SOL ya mboka efandi kozanga kosimbama.
    • Signe ya Phrase ya mboto oyo e compromis / Clé privée: Coin nionso na kati ya ba blockchains ebele ya ndenge na ndenge (Ethereum, Solana, Bitcoin, Arbitrum) ezali ko balabala libanda na nzela ya direct Transfer ba appels, mpe ETH/SOL native nionso oyo otindi eyibami na kati ya 1 seconde na bot ya balabala automatique.
  4. Kolongola mbala moko ba ndingisa nyonso ya bilembo ya kontra ya mayele oyo ezali kosala mbala moko: Soki gaz na yo ya ETH/SOL ya mboka ezali naino na portefeuille na yo, fungola mokambi ya indemnité oyo ozali kotyela motema (revoke.cash, Motali ya ndingisa ya bilembo ya Etherscan na etherscan.io/tokenapprovalchecker, to Mokambi ya Bondimi oyo etongami na kati ya Rabby Wallet) mpe Kolongola ndingisa nyonso ya mosolo ya bilembo oyo ezangi ndelo mpe ba signature ya Permit2 oyo epesami na ba adresse ya contrat oyo oyebi te.
  5. Kokata ba sessions nionso ya dApp oyo ezali actives mpe ba liens WalletConnect: Fungola ba paramètres ya portefeuille na yo -> Site connectés / Sessions ya WalletConnect mpe finá Disconnecter nionso mpo site internet ya phishing ekoki lisusu kobima te ba demandes ya signature.
  6. Soki "Sweeper Bot" ezali mbala moko koyiba gaz oyo otie mpo na kobikisa ba jetons enjeux, salela Flashbots / MEV bundler ya kobikisa: Jamais ko continuer kotinda ETH na portefeuille contrôlé na bot ya balabala, script automatique ya bot elandaka mempool mpe eyibaka ETH na yo na millisecondes avant o cliquer "Unstake". Na esika na yango, salelá service privé ya ERC-4337 / Flashbots MEV ya kobikisa faisceau atomique (lokola flashbots.net bisaleli ya whitehat to revoke.cash ba fonctionnalités ya frais délégués) pona ko financer gaz pe kobimisa ba jetons na bloc moko un-frontrunnable.

Danger

Soki otie na X (Twitter), Discord, Reddit, to Telegram ete portefeuille na yo ya crypto esilaki, bankama ya ba comptes bot automatiques ekoyanola to eko DM yo na kati ya 30 secondes koloba: "Contact @Blockchain_Cyber_Recovery na Telegram/Instagram, a récupérer USDT na ngai oyo bayibaki." Every single "crypto recovery hacker" to service ya récupération non gouvernementale na internet ezali escroquerie secondaire 100% fraudulent. Hacker moko te akoki ko reverser transaction ya blockchain confirmé. Ba escrocs oyo bakofuta yo liboso "ba frais ya logiciel to ya gaz" to bakokosa yo po opesa ba portefeuilles na yo oyo etikali.

Nzete ya mokano: kopekisa bopanzani ya portefeuille crypto oyo ezali kosala

Landa diagramme oyo ya triage technique en temps réel mpo na kopekisa makila mpe kobikisa ba biens numériques na yo oyo etikali:

flowchart TD
    A["Ba Transactions ya Crypto oyo ezo bima oyo epesami ndingisa te ezwami"] --> B["Generer Marque-Nouveau Portefeuille Propre na Portefeuille ya Appareil / Matériel ya Propre Separate"]
    B --> C{"Okomaki fraze na yo ya mboto ya maloba 12/24 to ozwaki fisyé, to obɛti kaka Sinya/Ndima na site moko?"}
    C -->|"Kaka cliqué Signer / Approuver / Reclamation na dApp"| D["Contrat intelligent ya mabe to Permis2 Drain"]
    D --> E["Mbala moko kende na revoke.cash to Etherscan Token Approvals mpe Revoke ba indemnités ya mabe"]
    E --> F["Botiaka ba jetons ya mayi oyo etikali na portefeuille na bino ya sika ya peto lokola bokebi"]
    C -->|"Tyá Phrase ya Momboto, abimisaki Fungola Privé, to asali logiciel ya mabe ya PC"| G["Phrase ya Momboto mobimba / Compromis ya Clé Privé"]
    G --> H{"Sweeper Bot automatique ezali koyiba mbala moko gaz nionso ya ETH/SOL oyo otie?"}
    H -->|"Te: Gaz ya mboka ezali naino kosala"| I["Evacuer ba coins liquides nionso & déstake ba positions ya DeFi mbala moko na portefeuille ya sika ya propre"]
    H -->|"Oui: Sweeper Bot ayibi gaz na < 2 secondes"| J["TIKA kotinda gaz. Salelá Flashbots privé RPC atomique bundle mpo na kobikisa ba jetons enjeux/airdrop"]
    F --> K["Trace portefeuille ya attaquant na Block Explorer, rapport na Exchange Compliance & FBI IC3 / Police"]
    I --> K
    J --> K

Diagnostic ya vecteur ya attaque: Drineur ya contrat intelligent vs. Compromis ya phrase ya mboto

Mpo na koboya kobungisa mbongo mingi ntango ozali koluka kobomba portefeuille na yo, esengeli liboso ososola ndenge nini mobundi azali kotambolisa mbongo na yo na kolukaka adresse ya portefeuille na yo na explorateur ya bloc public (etherscan.io, . solscan.io, . arbiscan.io, . basescan.org, to mempool.space).

Comparaison ya ba 4 mécanismes ya minene ya drain ya portefeuille ya cryptocurrency

Mecanisme ya Attaque Ndenge Bakosaki Moto oyo Bazwaki mpasi Ndenge Emonanaka na Explorateur ya Bloc Addresse ya Portefeuille eziki mpo na libela?
1.1. ERC-20 oyo ezangi ndelo approve() / . increaseAllowance() ** . Victime a cliqué "Approve" na faux airdrop, faux Uniswap, to site ya phishing, kopesaka contrat ya attaquant ndingisa ya ko dépenser Unlimited ya elembo moko ya sikisiki. Omoni a Approve transaction oyo o signer, elandi na sima a TransferFrom kobenga oyo ebandisami na Adresse ya mobundi oyo ezali kobenda jeton wana ya sikisiki. Te. Tango kaka o Revoque ndingisa na revoke.cash, moto oyo azali kobundisa ye akoki lisusu kosimba elembo yango te.
2.1.1. Off-Chain sans gaz Permit / . Permit2 Sinyatili (EIP-2612) Victime a cliqué "Signer" na message pop-up ya bokosi oyo emonanaki lokola vérification ya login sans danger, sans kofuta ata mbongo ya gaz. Omoni zéro transaction ya bondimi uta na portefeuille na yo; na esika na yango, contrat ya drainer etindi cryptographie na yo oyo o signer Permit message mpe e drain ba jetons na yo ya ERC-20 na étape moko. Te, soki mbala moko o Revoque Uniswap Permit2 indemnité maître to permis spécifique ya jeton na revoke.cash.
3. Solana Assign / Bozwami ya bokonzi ya compte to botindiki mingi Victime andimaki transaction ya Solana ya mabe na site ya menthe ya lokuta Phantom/Solana esika simulation ebombamaki to esalemaki na lokuta. Soit ba jetons SPL ebele na SOL e transféré na kati ya instruction moko ya bundled, TO Autorité ya propriétaire ya compte ya jeton na yo epesamaki lisusu na drainer. Soki ba reassigné Authority ya propriétaire ya compte na Solana, compte token wana spécifique ezali contrôlé na attaquant; kokende na ba biens oyo etikali na portefeuille ya sika.
4. Phrase ya mboto / Moyibi ya ba clés privées (Infostealer to Phishing) Victime akotisaki maloba na ye 12/24 na site ya lokuta ("Verify Ledger / MetaMask"), abombaki capture d'écran ya mboto na bango na Google Photos/iCloud, to asali ba malware na Windows/macOS. Simple direct Transfer ya ETH native, BTC, SOL, mpe ba jetons na kati ya ba chaînes ebele, mbala mingi ebatelami 24/7 na Sweeper Bot automatique. YES , 100% PERMANENTLY BURNED. Kosalela lisusu adresse moko te oyo euti na phrase oyo ya mboto.

Protocole 1: Kotelemisa Contrat ya Smart ya mabe to Permit2 Moto oyo azali kobwaka mai

Tango ozali kosala interaction na ba protocoles ya finance décentralisée (DeFi) na ba blockchains compatibles na Ethereum na EVM (Arbitrum, Optimisme, Base, Polygon, Avalanche, Chaîne BNB), ba jetons lokola USDC, USDT, DAI, PEPE, to WETH esalelaka norme ERC-20. Na design, contrat ya mayele ekoki te kobimisa ba jetons ERC-20 na portefeuille na yo soki opesi yango liboso Allowance te. Ba kits ya Phishing ("Drainers-as-a-Service" lokola Angel Drainer, Pink Drainer, to Inferno Drainer) ekosaka basaleli mpo na kopesa Allowance sans limite (115792089237316195423570985008687907853269984665640564039457584007913129639935 unité) to ko signer EIP-2612 oyo ezali hors chaîne Permit / Bosangisi ya Unis Permit2 message directement na contrat ya escroc.

Ndenge nini ko révoquer ba approbations ya ba jetons ya mabe na 60 secondes

  1. Fungola esaleli ya Revocation ya Allowance oyo ezali légitime, indépendant:
    • Kolongola.cash (revoke.cash) , Esungaka koleka 100 blockchains EVM mpe elakisaka nyonso mibale standard ERC-20/ERC-721 ndingisa mpe Permit2 ba signature oyo ezali na ba dates ya expiration.
    • Block Explorer Ba vérifier officiel ya ndingisa:
      • Ethereum: etherscan.io/tokenapprovalchecker
      • Monyololo ya BNB: bscscan.com/tokenapprovalchecker
      • Polygone: 1 . polygonscan.com/tokenapprovalchecker
      • Arbitrum: arbiscan.io/tokenapprovalchecker
      • Base: basescan.org/tokenapprovalchecker
    • Onglet ya sécurité intégrée ya portefeuille Rabby: Soki osaleli Rabby Wallet, finá elembo ya nguba Approvals mbala moko na kati ya interface ya portefeuille mpo na kolongolama na lote ba contrats ya risque sans kofungola page web.
  2. Bobongisa ba ndingisa na "Ya sika" to "Motuya na likama":
    • Tala na colonne Mobimisi mosolo. Ba protocoles légitimes eko lakisa ba étiquettes vérifiées lokola Uniswap: Universal Router to mpe Aave: Pool V3.
    • Ba draineurs ya mabe emonanaka mingi mingi lokola addresse hexadécimal brute oyo e vérifié te (e.g., 0x4f8a...9c12) to contrat ya lokuta oyo euti kosalelama kala mingi te.
  3. Fina "Revoke" mpe confirmer transaction na portefeuille na yo:
    • Kofina Kolongola etindaka transaction en chaîne oyo ekomi likolo ya indemnité ya dépenseur lisusu na ** .0** **.
    • Soki transaction wana e confirmer na blockchain (mbala mingi na kati ya 2 à 12 secondes), contrat ya drainer ekatamaka na mathématique na portefeuille na yo mpe ekoki kobenda cent mosusu ya jeton wana te.

Warning

Keba na ba liens ya phishing ya lokuta "Revoke" na ba publicités ya moteur de recherche. Ba cybercriminals basombaka routinement ba publicités ya recherche sponsorisées pona ba mots clés lokola "revoke cash" to "etherscan token revoke" oyo ememaka na ba domaines lookalike (revokecash-app.com). Tango o cliquer "Revoke" na site ya revocation ya lokuta, pop-up esengi yo vraiment o signer charge utile ya drainer ya sika. Talá ntango nyonso vérifier URL ya sikisiki (revoke.cash to mpe etherscan.io) mpe tanga simulation ya transaction na kati ya pop-up ya portefeuille na yo mpo na ko vérifier que indemnité ezali kotiama na ** .0** **.

Protocole 2: Kolonga "Sweeper Bot" automatique na phrase ya mboto oyo ezali na compromis

Soki pirate ayibi fraze na yo ya solo ya 12-word to 24-word recovery seed phrase (to clé privée brute), mbala moko ba charger clé privée na yo na script ya serveur automatique oyo babengi Sweeper Bot.

Ndenge nini Sweeper Bot ekangaka ba victimes

Kanisa ete portefeuille na yo ya Ethereum oyo ezali na likama ezali naino na $15,000 ya motuya ya ba jetons enjeux na contrat ya Aave, Lido, to EigenLayer (to airdrop ya jeton oyo ekoki ko réclamer oyo ekoya), TO ezali kaka na jeton ERC-20 oyo attaquant a déplacer nanu te, kasi attaquant a balabala solde na yo native ETH na se 0.0000 ETH **.

  1. Mpo na kolongolama to kotinda \(15,000 ya ba jetons na yo libanda na bokengi, portefeuille na yo oyo ezali na likama esengeli na **\)2.00 ya motuya ya ETH mpo na kofuta mbongo ya gaz ya réseau blockchain**.
  2. Otindi $5.00 ya ETH uta na compte Coinbase na yo na portefeuille na yo oyo ezali na likama mpo ete okoka kofina "Unstake".
  3. Na 0.8 secondes ya atterrissage na yo ya dépôt ETH ya $5.00, avant misapi na yo ya moto ekoki kutu ko cliquer bouton "Unstake", Sweeper Bot automatique ya pirate e détecter ETH oyo ekoti na mempool public mpe mbala moko ezo tirer transaction ya gaz ya priorité makasi oyo eyibaka $5.00 na yo ya ETH mbala moko ezongi libanda na adresse ya pirate.
  4. Mbala mingi, ba victimes bamekaka kotinda ETH mbala 10 na molongo, babungisaka $50 to $100 na gaz na Sweeper Bot mbala moko na moko ntango ba jetons na bango ya enjeu etikali kokangama na kati ya portefeuille oyo esalemi na likama.

Ndenge nini kobeta Sweeper Bot na nzela ya Flashbots / Privé MEV Atomic Bundles

Tika kotinda ba dépôts ETH mbala na mbala na portefeuille oyo elandami na Sweeper Bot. Ba bots ya balabala batalaka mempool ya transaction publique mpe esengeli na 1 bloc (to transaction public en attente) mpo na komona mpe koyiba ETH na yo oyo otie. Okoki kolonga Sweeper Bot nionso na kosalelaka Flashbots Protect / MEV Atomic Bundling (na ba chaînes Ethereum na EVM) to Jito Bundles (na Solana):

  1. Ndenge Atomic Rescue Bundle esalaka: Na esika ya kotinda ETH na Block #1 mpe koluka ko cliquer "Transfer/Unstake" na Block #2, bundle atomique e paquetaka ba transactions mibale ekeseni na kati ya array privé moko oyo etindami directement mpo na ko bloquer ba constructeurs na nzela ya Private RPC (completement invisible na mempool public esika Sweeper Bot ezali kotala):
    • Bundle Transaction #1 (euti na Portefeuille na yo ya Sécurité Propre): Etindi gaz ya sikisiki (0.0015 ETH) na Portefeuille Compromise.
    • Transaction ya Bundle #2 (e signer liboso na Portefeuille Compromise): Mbala moko ezo exécuter unstake() to mpe transfer() ya ba jetons na yo ya motuya libanda na Portefeuille na yo ya Sécurité Proto, ko consommer 100% ya yango 0.0015 ETH gaz na bloc exactement ndenge moko na microsecond exactement moko.
  2. Po ba transactions nionso mibale e exécuter atomiquement na kati ya bloc moko na visibilité ya mempool publique zéro, Sweeper Bot ya pirate emonaka jamais ETH ekomi pe elongwaka na 0.0000 ETH etikali ntango bilembo na yo ezali kokita malamu na portefeuille na yo ya pɛto.
  3. Makoki ya kobikisa ya Whitehat ya kotyela motema mpo na ba victimes ya Sweeper Bot:
    • Seal 911 (Security Alliance Whitehat Emergency Hotline): Esalemi na Paradigm mpe balukiluki ya liboso ya bokengi ya blockchain. Soki ozali na misolo ya ntina oyo ekangami sima ya bot ya balabala to exploit ya contrat intelligent active, benga bot officiel vérifié SEAL 911 na seal911.org (to na nzela ya lien officiel na bango ya Telegram na... securityalliance.org) mpo na lisalisi ya ofele ya whitehat MEV ya kobikisa bundling.
    • Mikanda ya kobikisa ya Flashbots Whitehat: Ba scripts ya source ouverte (flashbots/searcher-sponsored-tx) na docs.flashbots.net kopesa yo nzela ya ko sponsoriser gaz na portefeuille ya propre mpo na kobikisa ba biens ya ERC-20/ERC-721 na clé oyo ezali na compromis sans kokoma code personnalisé.
    • EIP-7702 / Bisaleli ya Gaz oyo epesameli: Ba utilités ya kobikisa ya mikolo oyo ekotisami na bisaleli lokola revoke.cash mpe Ambire/Rabby epesaka nzela ya kofuta revocation to gaz ya kobikisa na portefeuille secondaire.

Protocole 3 : Kolandela misolo oyo bayibi, kokanga ba off-ramps ya échange, mpe kopesa lapolo ya baye ya mibeko

Alors que mutu moko te akoki ko reverser transaction na blockchain décentralisé, ba cybercriminels suka suka balingi ko convertir crypto oyo bayibi na cash oyo ekoki ko dépenser to ba stablecoins ya propre. Ntango misolo oyo bayibi esimbaki Echange Centralisé (CEX) (lokola Binance, Coinbase, Kraken, OKX, Bybit, to KuCoin) to etikali kokangama na ba stablecoins centralisées (Tether / USDT mpe Circle / USDC), misolo wana EKOKI kozala congelé na équipe ya émetteur to ya compliance ya échange soki osali mbangu mpe otie rapport officiel ya mibeko.

1. Tracing ya mbala moko na monyololo mpe ba alertes ya congelation ya stablecoin

  1. Kopi ya Hash ya Transaction (TxID) mpe Addresse ya boyambi ya mobundi: Fungola explorateur ya bloc mpo na monyololo na yo, kopi hash ya transaction ya sikisiki ya moyibi, mpe finá na adresse ya portefeuille ya moyambi oyo ezwaki mbongo na yo.
  2. Kolongola ata moke te lisolo ya navigateur na yo to ba journal ya portefeuille na yo: Ba enquêteurs forensiques basengeli na URL ya phishing ya sikisiki oyo okendeki kotala mpe ba timbres ya ngonga ya sikisiki.
  3. Soki motango monene ya USDT (Kokangama) to USDC (Circle) bayibaki: Na bokeseni na ETH to BTC décentralisé, bango mibale Tether (USDT) mpe Cercle (USDC) kozala na fonction ya contrat intelligent intégré (addBlackList() / . blacklist()) oyo ekoki kokangama mpo na libela USDT to USDC oyo bayibi mbala moko na kati ya portefeuille ya komibatela ya pirate ntango ezwi bosengi ya nokinoki ya mibeko to motindo ya esambiselo.
  4. Bolandela esika wapi pirate azali kotambolisa misolo na kosalelaka ba traceurs visuels ya ofele:
    • Kola adresse ya portefeuille ya pirate na MetaSleuth (metasleuth.io), Nzela ya mobulu (misttrack.io), Mampa ya mampa (breadcrumbs.app), to Mayele ya Arkham (platform.arkhamintelligence.com).
    • Bongisa Etherscan / Solscan Watch Alert ya ofele na adresse ya portefeuille ya pirate mpo ozwa email na mbala moko pirate atinda ba mbongo ya bibende oyo bayibi na adresse ya dépôt ya Centralisé Exchange (ndakisa, adresse oyo ezali na étiquette Binance 14, . OKX, . FixedFloat, to ChangeNOW).

2. Ko contacter ba Bureau ya Compliance ya Exchange Centralisé & Ko déposer ba Rapports ya Police

Instant oyo trace na yo ya chaîne elakisaka misolo oyo bayibi ekoti na adresse ya dépôt ya Exchange Centralisé to service ya swapper instantané:

  1. Tinda Ticket ya Nokinoki ya Bosenga ya Congelation ya Mibeko na échangeur wana ya sikisiki: Échange nionso ya monene esalaka portail ya tike ya fraude/misolo oyo bayibi ya mbalakaka (lokola lisungi ya Binance Law Enforcement / Stolen Funds, Lisungi ya Coinbase, Kraken Security, to lisungi ya FixedFloat/ChangeNOW). Pesá:
    • Addresse ya portefeuille na yo ya victime, ba adresses intermédiaires ya attaquant, Adresse ya dépôt ya sikisiki na échange, mpe Transaction Hash (TxID) kolakisa misolo oyo ekoti na portefeuille chaud ya échange na bango.
    • Ba échanges mingi ekotia temporaire ya 24 à 72 heures interne ya compliance hold na ba comptes ya dépôt oyo ezali na drapeau suspect mpo na kopesa yo tango ya ko uploader numéro officiel ya rapport ya police mpe kosala que officier enquête na email na portail ya Demande ya Mibeko ya Échange (kodexglobal.com to portail LE direct ya échange).
  2. Kosala ba rapports officiels ya cybercrime ya ekolo mbala moko (100% ofele):
    • Etats-Unis: Kosala rapport ya mbala moko na Centre ya plainte ya crime internet ya FBI (IC3) na ic3.gov (pona mbongo ya virtuel mpe kotia hash nionso ya transaction, ticker ya jeton, valeur ya USD, mpe adresse ya portefeuille ya moyambi), lakisa na Service ya sekele groupe de travail ya cyber fraude ya bureau ya terrain ya esika, mpe kosala rapport ya police ya mboka mpo na kozwa Numéro ya cas ya officiel.
    • Royaume-Uni: Kosala rapport na internet na Action Fraud na actionfraud.police.uk to benga na 0300 123 2040 mpo ete Bureau national ya renseignements ya fraude mpe Unité ya police ya cyber crime bakoka kobimisa liyebisi ya kobatela échange.
    • Union européenne, Canada, & Australie: Dossier na nzela ya Chainabuse (chainabuse.com, oyo etambwisami na TRM Labs), oyo ekabolaka automatiquement rapport ya adresse ya portefeuille na yo ya escroc na ba échanges minene, ba listes noires ya sécurité ya portefeuille, mpe ba partenaires ya mibeko, pembeni ya Centre anti-fraude canadien (CAFC), Centre ya cyber sécurité australienne (cyber.gov.au), to bureau na yo ya Europol ya cybercrime.

Décontamination post-incident : kosukola ba appareils na yo mpe ko durcir ba portefeuilles ya mikolo ekoya

Yambo ya kosalela portefeuille na yo ya sika ya cryptocurrency mpo na ba transactions ya mokolo na mokolo, longola vulnérabilité ya misisa oyo esalaki compromis:

  1. Soki bayibaki Seed Phrase na yo tango ozali kosalela PC to Mac Windows, kanisá ete ozali na virus ya Infostealer: Malware oyo ebombami na kati ya ba fissures ya jeux ya lokuta, ba liens ya lokuta ya Zoom/Calendly, ba parrains ya lokuta ya Notion/PDF, to logiciel piraté etangaka na kimia ba fichiers ya coffre-fort LevelDB local ya ba extensions ya navigateur (MetaMask, Phantom) mpe etalaka clipboard na yo. Kolongola PC na Wi-Fi, sala sauvegarde kaka ya mikanda ya pamba, mpe sala reinstallation ya peto ya USB mobimba ya Windows to macOS.
  2. Salelá Portefeuille Matériel (Cold Storage) oyo epesameli mpo na kobomba mbongo, mpe "Portware ya moto" ekeseni mpo na dApps ya mokolo na mokolo:
    • Vault / Cold Wallet (90%+ ya misolo): Bomba Bitcoin na yo ya ntango molai, Ethereum, Solana, mpe stablecoins na portefeuille matériel dédié (lokola Trezor, Ledger, Coldcard, to Keystone) esika clé privée ebombami na kati ya puce Secure Element hors ligne oyo esimbaka jamais RAM ya ordinateur na yo. Ko connecter jamais adresse na yo ya Cold Vault na ba sites internet ya pamba pamba, ba menthes NFT, to ba airdrops.
    • Burner / Hot Wallet (< 10% ya misolo): Bomba portefeuille ya navigateur ekeseni oyo ezali kaka na mwa mbongo oyo olingi ko swap to ko minter na mokolo wana. Soki mokolo mosusu obɛti lien moko ya mabe na Portefeuille na yo ya molunge, Cold Vault na yo etikalaka 100% kozanga kosimbama.
  3. Tia extension ya simulateur ya transaction Web3 en temps réel: Ba portefeuilles ya mikolo oyo lokola Rabby Wallet na Phantom, to ba extensions ya sécurité ya navigateur ya ofele lokola Pocket Universe na Wallet Guard, simuler transaction nionso avant o signer yango pe pop up a lecture ya avertissement rouge ya kongenga: "KEBISI: Ko signer message oyo eko drainer ba USDC na NFT na yo nionso na oyo otie motema te adresi."
  4. Kobomba ata moke te fraze na yo ya mboto ya maloba 12/24 na ndenge ya numérique: Kozwa ata moke te fɔtɔ́ ya smartphone ya fraze ya mboto na yo (ba sauvegarde ya bafoto ya lipata ezali cible ya liboso mpo na ba pirates), kobomba yango ata moke te na gestionnaire ya mot de passe, Apple Notes, Google Docs, to ba email ya Draft, mpe kokoma ata moke te fraze ya mboto na yo na site internet to na clavier moko te. Koma kaka fraze ya mboto na yo na papier physique to tia yango na ba plaques ya acier inoxydable oyo ekoki kozika te oyo ebombami na coffre-fort physique.

Mituna oyo batunaka mingi

If I revoke a malicious smart contract approval on revoke.cash, is my wallet safe to keep using, or do I need a brand-new wallet?

If you are 100 percent certain that you only clicked "Approve" or "Sign" inside a normal dApp browser pop-up and **never** typed your 12-to-24-word seed phrase, exported your private key, or downloaded malicious software onto your computer, then revoking the malicious token approvals at `revoke.cash` stops the smart contract drainer completely. However, because creating a fresh wallet address is free, security researchers still recommend generating a brand-new seed phrase on a clean device and moving your remaining funds to the new address just in case you missed an obscure approval on another chain.

How could my Ledger or Trezor hardware wallet get drained if I never typed my 24-word seed phrase online?

A hardware wallet can be drained without leaking the 24-word seed phrase if the owner is tricked into **blind-signing a malicious smart contract transaction (`approve` or `Permit2`) directly on the physical hardware wallet buttons**. Remember: a hardware wallet keeps your private keys offline, so no virus can steal your keys by itself, but if a phishing website sends a malicious contract call to your Ledger or Trezor and you physically press both buttons on the device to "Approve" it, the hardware wallet faithfully signs the thief's transaction. Only the specific token/chain you approved is affected; your other accounts and Bitcoin on that hardware wallet remain safe once you revoke the bad contract approval.

Someone in my DMs or comments says they used a "blockchain recovery specialist" or ethical hacker to get their stolen crypto back. Is that real?

No, it is 100 percent a scam. Criminal syndicates use networks of thousands of automated bot accounts on X (Twitter), YouTube, Reddit, Discord, and Telegram that scan for words like "drained", "scammed", "MetaMask", or "stolen" and immediately post fake testimonials praising a fake recovery hacker. No individual, hacker, or private company can reverse a blockchain transaction or hack a scammer's wallet back. Only law enforcement agencies working with centralized exchanges (like Binance or Coinbase) or stablecoin issuers (Tether/Circle) have the legal power to freeze stolen funds.

Can I claim stolen cryptocurrency from a wallet drain or phishing attack as a tax loss deduction?

Tax treatment of stolen cryptocurrency depends on your country and how the theft occurred. In the United States, under current Internal Revenue Service (IRS) guidance (such as Chief Counsel Advice 202302011 and IRC Section 165), personal casualty and theft losses are generally restricted unless connected to a transaction entered into for profit (IRC Section 165(c)(2)), which is an active area of tax guidance. In the United Kingdom (HMRC `CRYPTO22250` Negligible Value / Theft rules), Canada (CRA), and Australia (ATO capital loss rules on lost/stolen crypto), specific documentary proof (blockchain transaction hashes, wallet ownership proof, and an official police report number) is required. Always save your full block explorer `CSV` export and police report for a qualified crypto CPA or tax advisor.

What is "Address Poisoning" (Zero-Value Transfer Spoofing) and how does it steal crypto?

In an **Address Poisoning** attack, your wallet has NOT been hacked at all. Instead, when you send a legitimate transaction to a friend or exchange address (for example, `0xAb12...89Ef`), a scammer's bot uses a vanity address generator to create a fake wallet address that has the **exact same first 4 to 6 characters and last 4 to 6 characters** (`0xAb12...89Ef`), and sends a `0 USDT` or tiny dust transaction to your wallet so their lookalike address appears at the top of your wallet's "Recent Transaction History". They hope that the next time you send money, you will lazily copy-and-paste the address from your recent transaction history without checking the middle 30 characters. Never copy destination addresses from your transaction history; always use a saved Address Book contact or verify the entire 42-character string.

What should I do if I still have an upcoming claimable token airdrop or locked staking timer expiring in 7 days inside a compromised wallet?

Do not wait until the exact minute the staking timer or airdrop claim opens to try clicking it manually, the attacker's Sweeper Bot is already programmed to claim and steal the tokens in the exact millisecond the unlock block arrives. Instead, reach out at least 24 to 48 hours **before** the unlock timer expires to a verified whitehat rescue team such as **SEAL 911 (`seal911.org`)** or set up a **Flashbots MEV rescue bundle** rigged to execute in the very first block of the unlock height with a competitive builder priority bribe so your whitehat bundle beats the attacker's bot.

Ba sources e vérifié

  • Bureau fédéral d’enquête (FBI, Etats-Unis): Centre ya plainte ya crime internet (IC3) Ba rapports ya fraude ya cryptocurrency mpe mayebisi ya fonction publique na ba drainers ya contrat ya DeFi Smart (ic3.gov).
  • Agence ya bokengi ya cybersecurité mpe ya infrastructure (CISA, Etats-Unis) & NSA: Bobateli ya cryptocurrency, authentification oyo ekoki koboya kofinga, mpe toli ya ba malware ya Infostealer (cisa.gov).
  • Bureau ya protection financière ya ba consommateurs (CFPB) & Commission fédérale ya commerce (FTC, Etats-Unis): Kokima ba escroqueries ya crypto mpe ba services ya récupération ya lokuta (consumer.ftc.gov).
  • Centre national de sécurité cybernétique (NCSC) & Fraude d’action (Royaume-Uni): Bokambami ya bokengi ya biloko ya crypto mpe kopesa lapolo ya biloko ya nimero oyo bayibaki (ncsc.gov.uk, . actionfraud.police.uk).
  • Ethereum Foundation & EIP Normes (International): ERC-20 Token Norme (EIP-20), Bondimi ya ndingisa ya kozanga gaz (EIP-2612), mpe Abstraction / Bundling ya compte (ethereum.org, . eips.ethereum.org).
  • Alliance ya bokengi (SEAL 911) & Flashbots Whitehat Collective (International): Protocoles ya kobikisa ya Whitehat Sweeper-Bot ya urgence mpe MEV Atomic Bundling (securityalliance.org, . docs.flashbots.net).

Ba guides oyo etali yango