The attack highlights significant security risks in the DeFi space and underscores the need for heightened vigilance among Web3 users.
The phishing incident unfolded when the attacker tricked the user into reassigning ownership of their DeFi Saver Proxy contract.
Phishing Attack Drains $55M from DeFi Saver User
According to a post from blockchain security firm Global Ledger on X, the attack involved a clever manipulation of smart contract functions. The victim, identified through Etherscan as having the smart contract wallet labeled “DSProxy #166,776,” was lured into interacting with a malicious web application.
On August 20th, the victim executed a transaction to call the “Set Owner” function of their smart contract, inadvertently designating a phishing account as the new owner. This misstep likely resulted from the victim being deceived by the malicious app, which had tricked them into approving the transaction.
Source: X
Following the ownership change, the attacker promptly reassigned the contract’s ownership and drained the wallet of its entire balance of DAI. Blockchain data shows the stolen DAI came from a null address. This indicates the attacker minted it using the victim’s collateral.
More About the DeFi Saver Phishing Attack
The $55 million loss highlights the vulnerabilities in decentralized finance and the need for cautious transaction practices. DeFi protocols offer innovative solutions but can also be vulnerable to sophisticated attacks exploiting user trust and procedural weaknesses.
Source: X
To protect against similar attacks, Web3 users should meticulously verify contract addresses before executing transactions. Reputable protocols list official contract addresses in their documentation; cross-referencing these can help prevent phishing. However, it is crucial to note that while such precautions can reduce risk, no security measure is entirely infallible.
Disclaimer
The information discussed by Altcoin Buzz is not financial advice. This is for educational, entertainment, and informational purposes only. Any information or strategies are thoughts and opinions relevant to the accepted levels of risk tolerance of the writer/reviewers and their risk tolerance may be different than yours. We are not responsible for any losses that you may incur as a result of any investments directly or indirectly related to the information provided. Bitcoin and other cryptocurrencies are high-risk investments so please do your due diligence. Copyright Altcoin Buzz Pte Ltd.
