发布: 2024/01/22 18:04 阅读: 219
A group of fraudsters has managed to deceive over 42,000 victims, accumulating a staggering $32 million in a series of crypto scams that began in April 2023.
一群诈骗者已成功欺骗了超过 42,000 名受害者,在 2023 年 4 月开始的一系列加密货币诈骗中累积了惊人的 3200 万美元。
What makes this scam unique is the use of a method that even fooled some of the industry’s renowned “rug pull detectors,” as revealed by blockchain security firm Blockfence.
正如区块链安全公司 Blockfence 透露的那样,这个骗局的独特之处在于它所使用的方法甚至欺骗了一些业内著名的“地毯拉力探测器”。
Typically, these scammers create tokens that impersonate upcoming crypto projects, capitalizing on the fear of missing out (FOMO) to entice unsuspecting investors.
通常,这些诈骗者会创建冒充即将推出的加密项目的代币,利用错失恐惧症 (FOMO) 来吸引毫无戒心的投资者。
Pablo Sabbatella, Blockfence’s head of security research, noted that they then manipulate the maximum token supply through minting and burning, alongside a code bait-and-switch tactic to effectively deceive victims while eluding rug pull detectors.
Blockfence 安全研究主管 Pablo Sabbatella 指出,他们随后通过铸造和销毁来操纵最大代币供应量,并采用代码诱饵和转换策略来有效欺骗受害者,同时躲避拉扯探测器。
Sabbatella explained that the scammers initiated the process by transferring approximately 10-20 Ethereum (ETH) to an externally owned account, which they then used to generate counterfeit tokens.
Sabbatella 解释说,诈骗者通过将大约 10-20 以太坊 (ETH) 转移到外部拥有的账户来发起这一过程,然后他们用该账户生成假冒代币。
Injecting fake liquidity into the scam project, they created the illusion of legitimate volume in liquidity pools on Ethereum-based decentralized exchanges like Uniswap.
他们向骗局项目注入虚假流动性,在 Uniswap 等基于以太坊的去中心化交易所上制造了流动性池合法数量的假象。
骗子实施锁定功能进一步欺骗投资者
To further deceive investors, the scammers implemented a lock() function on the LP tokens, giving the impression that rug pulling would be prevented.
为了进一步欺骗投资者,诈骗者对 LP 代币实施了 lock() 函数,给人一种可以防止拉扯的印象。
Once the price of the fake token was artificially inflated through wash trading, the scammer executed the setUserBalance function.
一旦通过虚假交易人为抬高假币的价格,诈骗者就会执行setUserBalance函数。
This action updated the victim’s token balance to “1” and technically burned the token, making it impossible to sell.
此操作将受害者的代币余额更新为“1”,并从技术上烧毁代币,使其无法出售。
However, the token remained visible in the victim’s wallet, adding to the deception.
然而,该代币在受害者的钱包中仍然可见,这加剧了欺骗。
Sabbatella elaborated, stating that the scammer would eventually remove the liquidity from the LP, causing the token’s value to plummet close to zero.
Sabbatella 详细解释道,诈骗者最终会从 LP 中消除流动性,导致代币的价值暴跌至接近于零。
Curiously, the scammers returned 5-20 ETH from each scam to avoid drawing excessive attention.
奇怪的是,诈骗者每次诈骗都会返还 5-20 ETH,以避免引起过多关注。
Another aspect of the scammers’ technique involved the contract owner and creator renouncing ownership of the token contract, which could bypass certain detector tools.
诈骗者技术的另一个方面涉及合约所有者和创建者放弃代币合约的所有权,这可能会绕过某些检测工具。
Sabbatella noted that victims purchasing the token were misled, as even some rug pull detectors failed to identify and label the token as unsafe.
Sabbatella 指出,购买该代币的受害者受到了误导,因为甚至一些地毯拉力探测器也未能识别该代币并将其标记为不安全。
According to Blockfence’s findings, they have observed around 1,300 separate incidents of rug pulls on Ethereum following the same pattern.
根据 Blockfence 的调查结果,他们观察到以太坊上发生了大约 1,300 起遵循相同模式的独立事件。
Sabbatella highlighted a specific incident where a scammer created a “Blockfence token” using these sophisticated techniques, resulting in the scammer absconding with 23.6 ETH valued at $53,000.
Sabbatella 强调了一个具体事件,诈骗者使用这些复杂的技术创建了“Blockfence 代币”,导致诈骗者带着价值 53,000 美元的 23.6 ETH 潜逃。
加密骗局利用 Meme Coin 狂热推出假代币
The scammers also impersonated other tokens such as Wisealth, RabbitRun, DreamFi, capitalizing on the popularity of meme coins.
诈骗者还利用 Meme 币的受欢迎程度冒充其他代币,例如 Wisealth、RabbitRun、DreamFi。
Tokens with similar names like AIPEPE, Purple Pepe, Pepe Chain, Pepe Race, and Baby Pepe were created to exploit the memecoin trend.
AIPEPE、Purple Pepe、Pepe Chain、Pepe Race 和 Baby Pepe 等名称相似的代币是为了利用 memecoin 趋势而创建的。
Despite losing around $2 billion to crypto thefts, 2023 saw a slight decline in hacking incidents targeting the cryptocurrency industry.
尽管加密货币盗窃造成了约 20 亿美元的损失,但 2023 年针对加密货币行业的黑客事件略有下降。
According to a recent report from De.FI, a prominent web3 security firm known for its REKT database, hackers managed to pilfer $2 billion in digital assets throughout the year.
根据 De.FI(一家以其 REKT 数据库而闻名的著名 web3 安全公司)最近的一份报告,黑客全年窃取了 20 亿美元的数字资产。
While that amount is still alarming, it marks the first decrease in crypto hacking incidents since 2021.
尽管这一数字仍然令人担忧,但这标志着加密货币黑客事件自 2021 年以来首次减少。