A recent phishing scam led to a major loss of approximately $760K in wstETH, stETH, and pufETH due to malicious approvals.
Key Wallets Involved
Victim’s Wallet: 0x5789A38a3FAcfaa86ED950e88D79a9A2F6140052 – $760K stolen
Hacker’s Wallet: 0xA212763d2BdDb0BD704f1df9Ab9F3A6b64ACa633 – Holding stolen funds
Drainer Wallet: 0xFC4EAA4ac84D00f1C5854113581F881b42b4A745 – Linked to multiple scams
What’s Happening?
Unlike other scams where funds are quickly laundered, the hacker’s wallet still holds the stolen assets with no sign of movement.
Hacker’s Wallet Created: June 11, 2024
Initial Balance: $850K (and rising)
The drainer wallet, known for its fraudulent activities, was created on July 22, 2024, and now holds over $3.1M, taking a 10-11% cut from stolen funds.
️ How This Scam Works
Scammers use phishing websites to trick victims into signing malicious transactions, redirecting funds through a well-known "Scam-as-a-Service" system: Exogator Drainer.
Exogator Drainer Facts
How Victims Get Tricked
Fake websites with malicious smart contracts
Victims unknowingly approve a fraudulent transaction
Funds are split between the scammer & Exogator Drainer
Stolen assets are linked to a malicious smart contract (0x0000db5c8B030ae20308ac975896e79741e70000)
The Scale of the Scam
Over $100M stolen from thousands of victims
More than 16,000 wallets affected
Scammers remain anonymous
Key Wallets Involved
Victim’s Wallet: 0x5789A38a3FAcfaa86ED950e88D79a9A2F6140052 – $760K stolen
Hacker’s Wallet: 0xA212763d2BdDb0BD704f1df9Ab9F3A6b64ACa633 – Holding stolen funds
Drainer Wallet: 0xFC4EAA4ac84D00f1C5854113581F881b42b4A745 – Linked to multiple scams What’s Happening?Unlike other scams where funds are quickly laundered, the hacker’s wallet still holds the stolen assets with no sign of movement.
Hacker’s Wallet Created: June 11, 2024
Initial Balance: $850K (and rising)
The drainer wallet, known for its fraudulent activities, was created on July 22, 2024, and now holds over $3.1M, taking a 10-11% cut from stolen funds.
️ How This Scam Works
Scammers use phishing websites to trick victims into signing malicious transactions, redirecting funds through a well-known "Scam-as-a-Service" system: Exogator Drainer.
Exogator Drainer Facts
- Active Since: September 2022
- Estimated Total Stolen: Over $70M
- How It Works:
20% of stolen funds go to Exogator Drainer
80% goes to the scammer - New Variant: A "Lite" version may now take only 10% in fees instead of 20%.
How Victims Get Tricked
Fake websites with malicious smart contracts Victims unknowingly approve a fraudulent transaction Funds are split between the scammer & Exogator Drainer Stolen assets are linked to a malicious smart contract (0x0000db5c8B030ae20308ac975896e79741e70000)The Scale of the Scam
Over $100M stolen from thousands of victims
More than 16,000 wallets affected
Scammers remain anonymous
