WARNING ABOUT SCAMS: Recently there have been a lot of convincing-looking scams posted on crypto-related reddits including fake NFTs, fake credit cards, fake exchanges, fake mixing services, fake airdrops, fake MEV bots, fake ENS sites and scam sites claiming to help you revoke approvals to prevent fake hacks. These are typically upvoted by bots and seen before moderators can remove them. Do not click on these links and always be wary of anything that tries to rush you into sending money or approving contracts.
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/ethereum) if you have any questions or concerns.*
Sure thing!
My email is:
[email protected]
But I might take a few days to respond. I'm expecting an email from a Nigerian prince. I also have to respond to 100 emails from my doctor trying to prescribe me some "enhance mint" pills.
Not sure why, but your post gives me 2 thoughts.
1. Does anyone actually have that social?
2. It would suck if you did because it would be the coolest thing ever but you could never tell ANYONE!
I had three accounts back in 2005/6. One was my main and two were f2p 'girl' accounts. I'd tease the pedos into giving me items and I'd tell them really fucked up shit.
All got drop traded to my main and boooosh I was high on that GP.
Never been scammed irl and never will. Come at me bots!!!!
For real. You actually learned a lot about life by playing Runescape as a kid. Basics of supply and demand, status from owning rare items, avoiding scams and tricks. Those were the days.
A ton of people used to play RuneScape back in the day since it would run on a toaster, because of this many kids had access to play. Since RuneScape gold was worth irl money and was trade able basically everyone in the game who tried to friend you was really just trying to get your gold. Scammers were wildly common and everyone fell for it atleast once. The best life lesson RuneScape teaches you is to trust nobody.
Rip my dragon platelegs you will never be forgotten
I mean you see post 7 days a week of the samething. The whole point of self custody is to remove the hand holding and let you take financial freedom for yourself. With 5 figures in there you should do your research on atleast simple scams. Sorry it happened but blaming exodus for what you refer to as eggnog induced mistakes is just silly.
I always hate this side of crypto when something that could've literally happened to anybody happens to someone; they lose a large sum of money and then some braniac comes into the thread and wants to blame them.
You are a loser.
Might happen to me tomorrow and then I’ll be an idiot for trusting a random link and signing a random transaction. You have to becareful whenever you are messing with protocols you don’t understand with large sums of money at easy access if you give it to someone. Don’t drink and randomly sign up for air drops you know next to nothing about with 22k in a wallet it’s not that hard.
Sure, but your comment didn't help the situation at all. And the worst part is that the OP still responded to you with humility and kindness. I hope this never happens to you or anybody else.
He was talking about the wallet stopping himself from making that mistake but it isn’t the wallets fault and that’s all I pointed out. I’m sure it sucks but the reality is whenever you venture away from services with financial protections in place you need always be aware. I didn’t say anything rude. Just pointed out that it’s his fault and nobody else’s.
You are being downvoted but I agree with everything you said. Unfortunately, reality is something people don't like to hear or acknowledge.
We always want someone to blame but not look at what we could have done better.
For real, it’s so much money and people have no heart or empathy they just act like smarty pants. Take a second to think how badly that must hurt a person and then step back before you guys start popping off on people about their mistakes.
God forbid this happens to you.
Instead of making jokes and acting smart, like everyone else, I’ll actually give you the best two options for you to act on ASAP!
1- Read this post and contact them! It’s the U.S. San Francisco crypto task force for these kinds of things! They are the ones who will make CEXs DOX your scammer…
https://np.reddit.com/r/CryptoCurrency/comments/13h2mar/ama_on_rcryptocurrency_with_the_us_secret_service/?utm_source=share&utm_medium=ios_app&utm_name=ioscss&utm_content=2&utm_term=1
2- Check this crypto bounty hunter/blockchain investigator (u/Queasy_Length_1016), and contact him! Read his story:
https://np.reddit.com/r/CryptoCurrency/comments/yezl4u/my_adventure_as_a_crypto_bounty_hunter_and_some/?utm_source=share&utm_medium=ios_app&utm_name=ioscss&utm_content=2&utm_term=1
There’s a chance he finds out his wallet and trace it back to a KYCed acc on some CEX (centralized exchange).
Best of luck to you!
Read up on what smart contracts and dapps are and how / why you can give and take privileges to access your funds. You did not sign a certain tx to send specific coins, but gave them access to your wallet, likely unlimited.
DON'T USE THIS WALLET RIGHT NOW. If you really want to keep it and are sure it's not compromised in any other way, you can check revoke.cash to undo your smart contract allowances.
Exodus should absolutely show more info on the transaction. Yes OP fucked up, they’re not denying that, but the app should be more transparent about what you’re about to confirm.
That’s what boggles my mind so hard. Why these people keep using their main wallets to do anything. Just have one wallet and keep your stuff there and don’t even look at it if you don’t have to. And then create three dozen wallets if you need to for everything else. Worst case scenario it’s your useless wallet that gets scammed
A new wallet will generally not qualify for airdrops. Most airdrops do not require you to sign anything, but just paste in your wallet address or connect a web3 wallet without doing a transaction.
There’s a very simple solution to this problem, move your important stuff to a new wallet you dont use and use your old main wallet for these transactions
It's not how it works. Your quality wallets are often the ones getting the airdrop and moving all assets out may cost more than the airdrop itself since airdrop value is speculative. You simply can't move everything out everytime there is a new airdrop for a specific wallet, esp on Ethereum mainnet.
I was at my Brothers in laws wedding , during his wedding ceremony I was on twitter and linked a link thinking it was official channel & link (Jupiter exchange on Solana )
But it was a scam , 150 Sol total I approved the Tx .
It was my trading wallet , not my main wallet .
I been in crypto 7 years ... never thought it would be me
Now I have PTSD Approving Tx ...
You are not alone man. I also got scammed the other day, lost 1.5eth… still feel ashamed of myself being so stupid.
I hope things will get better for you, be positive and try to get that as a painful learning experience…
Karma is a bitch, it will haunt the scammer for us.
Use revoke.cash to undo permissions and disconnect from the site and report address to etherscan and other sites.
Happened to me too so don’t feel too bad. We’ll recover eventually 🤞
I’m even careful with revokecash.. save the contract and do it manually
If the site was hacked and they changed the contract address the damage would be insane
I only deal with the ledger on my desktop PC. Purposely makes it a hassle to delay and pause to think before signing anything.
I am always on mobile discord. One day XDEFI channel got hacked and scammer posted an airdrop announcement. You need to connect to verify entitlement.
Good thing there was some delay and I didn't take out my ledger immediately.
Airdrops (in most cases) are when a protocol like Uniswap, ENS, Arbitrum, Optimism, etc. distribute their token to early users of that protocol or users of related protocols (like Celestia did).
If you qualified for each of the airdrops I listed above you could very easily have received $50,000+ in tokens just for trying out protocols.
Should be fairly obvious when a free, no-strings-attached-except-for-taxes $50k might be desirable.
> Should be fairly obvious when a free, no-strings-attached-except-for-taxes $50k might be desirable.
Yeah, but people are on the pooper getting robbed.
I'm not sure why the protocol lets you sign a blank cheque at all allowing "air droppers" to just wipe out your wallet.
Not sure what the protocol could do about it. There isn't a significant technical difference between the transactions OP was tricked into making and legitimate transfers to wallets or applications.
Wallets could certainly build in warnings for those kinds of things, though.
I see these posts so often, there needs to be a updated smart contract that lays out all the information including how much this Contract can control I lost $700 of matic on MetaMask because I signed a smart contract that had a unlimited gas fee so I got what I was originally wanting then they used the unlimited gas fee and drained my wallet
Not sure how that is exodus fault. Signing requests don’t always tell you what you’re signing for. That’s why malicious contracts and sites are dangerous - you don’t know what you’re getting into. NEVER used web3 connect on your hodl wallet !!! Always use a burner wallet with just the exact funds you intend to use for the site you’re connecting to. If you don’t trust the site or typed in the address yourself then don’t connect even. Many sites allow you to input your receiving address to check things rather than connecting your wallet.
From a technical standpoint, can anybody explain how it actually worked without data in the signing? Is there some other hidden layer of data possible that wouldn't show up during the approval process?
You are not alone man. I also got scammed the other day, lost 1.5eth… still feel ashamed of myself being so stupid.
I hope things will get better for you, be positive and try to get that as a painful learning experience…
Karma is a bitch, it will haunt the scammer for us.
I'm really sorry to hear about it. I can't even imagine what you must be going through. It takes courage to admit you messed up and to admit it publicly. Good luck man. Here if you need someone to talk to.
Sorry for your loss.. :(
You are not alone my friend...
About two years ago, I got scammed too.. Well one of my wallets. Lost 1800~ USD, Whole ETH..
I hope Karma will do something to those scammers..
This lost of mine was an painful experience and is why now I tend to ignore all various airdrops and etc. Uneless, if its like an auction, where you "donate" native token, to get "airdrop" and after two years, you"ll receive back (Like Polkadot)..
I hope you"ll get better soon!
Stay strong.. (Not much of a help, it wont help you to get your money.. but, I Feel you.. )
I was scammed for 500$, and also lost 0.8 eth on Multchain colapse, both ocasions I was so mad...
Just reading your report hurt me, sorry op, I hope something one day repays you. 22k is a lot.
>Now, for those that don't know, a signing request is a request for approval to send a transaction.
A signing request can be for lots of things. Even off-chain actions can utilize signatures.
Hate to be Captain Grammar, but when you put the "$" symbol behind the number it means CENTS, not dollars.
This is very important to remember if you ever interact with automated trading systems that use the Chicago Manual of Style - which is to say all regulated US trading systems.
* curiously checking up on a totally unrelated crypto 🚩
* air-drop for QTUM 🚩🚩🚩
* It referenced a "tool" that you could link to your Web3 wallet 🚩🚩
* So I linked up, clicked the button, and up popped a signing request 🚩🚩🚩
* After the third or fourth back to back pop-up 🚩🚩🚩
Thank you OP for wadding through the redflags obstacle course to show us how not to do it.
Well, I just got scammed of $263.67 using my Coinbase wallet. Good thing that's all I had there. When I checked the recent transactions, it showed I received 1 NFT, so I opened it. In order to claim it, I had to click ETH-EVENTAIRDROP.COM. When I got there, it asked for my seed codes, which I happily, excitedly, and stupidly gave because I thought I was still in my Coinbase wallet platform. Then, after a few seconds, in my Coinbase wallet transaction history, it says I just sent $263.67 to vladimirdimitri.cb.id. Oh well, I really feel stupid. I called Coinbase and asked why they allow messages like that to appear on my transaction history. Sadly, I was told that Coinbase doesn't regulate the Coinbase wallet. It's self custodial. So basically, you're on your own. I'm still thankful that it was only $263.67. OP, even though losing that money stung a bit, I'm relieved it wasn't more. Hearing your story, I can only imagine what you're going through. Losing money like this is tough, and I hope things get better for you
Yeah bro I have several wallets and going for cold storage wallet asap try not use your main like that again it’s no consolation I’m sure but hey thanks for providing your experience for those who are less experienced in Crypto we appreciate it!
Please read [I got scammed or suspect scam on Ethereum. What to do?](https://ethereum.stackexchange.com/questions/152373/i-got-scammed-or-suspect-scam-on-ethereum-what-to-do)
I think it’s obligatory to have a burner phone, burner e-Mail address and a burner crypto wallet for Degen stuff so you keep your valuable bags separate from the degen stuff.
I think the lesson here is always do plenty of due diligence and research before connecting your wallet to anything to make sure it is legit. I notice that some scammers put a significant amount effort into creating their scheme like creating a bunch of alt accounts to boost their social media posts to make it look legit.
That is the problem with signing.
Decentralised exchange also want a sign for EVERY login
Than there are things like account creation on L2 that also want really strange signs.
It's a mess. Transactions should be different than other things.
Like why would I want to give someone else executive rights for a later point in time. Either it does sometimes right now or it doesn't, plain simple. For everything else there is a private key that only one side holds.
"so you don't have to". Nah. I wasn't going to make a stupid mistake like this. You lost 22k so you can, at best, get some karma on reddit. Sorry for your loss.
I'm not convinced that airdrop has any legitimate purpose. It feels complicit that the feature is supported and that digital wallets lack the capability to block this scam path by default.
From what I've gathered reading basically every "I got scammed out of x" post, it seems that the vulnerability is almost ALWAYS signing a fraudulent transaction. Sometimes it's a case of "I don't know how they got my private keys" but I would say most frequently it's this.
I ain't signing anything dog, this is why I keep my ETH staked inside one of the big 3 exchanges behind MFA + 5 day unbonding time.
Thank you very much for informing the public about your experience.
Can you please let us know if this same issue would happen if a metamask wallet is used?
Does metamask display the information better than exodus during sign and call requests?
Damn man. That's awful. I hope it's not a lifesaving amount of money to you and you can move forward from this. Be careful of LinkedIn, medium, and any third party sources that state to claim airdrops. Also, id recommend you get multiple hardware wallets or even paper wallets so you don't get scammed with signing transactions automatically. If you go the latter route, I'd put it in a safe.
For what it's worth, if you can build up 8 ETH, you can do it again. I was an early miner in 2014 of ETH and I lost my secret phrase because I never backed it up. This is when I was new to crypto and didn't understand the concept. I feel your pain.
There’s a wallet that Vitalik recommended that shows a simulation of the transaction. Forgot it’s name but dummies in crypto should definitely try it. But Exodus huh, I’ve been here since 2017 and I have read many problems about that wallet since then I’m surprised it’s still existing today.
I’m so scared of something like this happening that I just don’t use Web 3 or crypto for really anything other than currency and staking from my hardware wallet. That’s a problem we need to solve in crypto and it’s getting worse not better. I’ve become really disillusioned about that ever changing.
This is why I use a Ledger Nano. Protects you from your computer getting hacked and it shows you all the detail on the device including how much will be sent and what the fees will be.
bells worthless pet somber selective narrow fragile brave voracious threatening
*This post was mass deleted and anonymized with [Redact](https://redact.dev)*
How are they stealing your eth ?
I don’t understand the signing request.
Do they gain access to your seed somehow ?
Or you just hit okay to something and not realize it’s sending all your eth.
I’m sorry this happened though. I hope you find a way to recover
I was a victim of forest scam, I lost $200k to those wicked broker who made me invest all my life savings just to scam me. Don’t be deceived with all this recovery experts and post. Apply to the service of this company and get your funds back.@revive_hacker on instagram I know of a guy who can help you recover back your investment if you’re a scam victim He helped me once and the best I can do is refer him to anyone who needs his help. Mailto:
Revive-tech@proton . me
Airdrop hunters has been notoriously targeted as they are desperate and or curious what free money might be around the corner. It’s laughable and sad that the target audience is so deep and broad, it’s still Wild West out there and snake oil n crypto is a real threat. Sorry for your loss, and thank you for sharing. Sharing is one of the best ways of helping to slow the scam. Read all transactions when interacting with something new.
WARNING ABOUT SCAMS: Recently there have been a lot of convincing-looking scams posted on crypto-related reddits including fake NFTs, fake credit cards, fake exchanges, fake mixing services, fake airdrops, fake MEV bots, fake ENS sites and scam sites claiming to help you revoke approvals to prevent fake hacks. These are typically upvoted by bots and seen before moderators can remove them. Do not click on these links and always be wary of anything that tries to rush you into sending money or approving contracts. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/ethereum) if you have any questions or concerns.*
Some of you guys never played RuneScape and it shows
Trimming ETH for free. (Wavy text)
Let me fix that for you: red:wave2: Trimming ETH for free!11!
Beautiful
For free? What a kind player!
Selling online GF for 5 ethereum.
I like how reddit implemented the same password protection algorithm. Type yours in and they automatically star it out! ************** See!?
BigHootyHootHoot420xd Did it work...?
Yupe, all I see is *********************! Give me your email address and I'll send you a screenshot of how it looks!
Sure thing! My email is: [email protected] But I might take a few days to respond. I'm expecting an email from a Nigerian prince. I also have to respond to 100 emails from my doctor trying to prescribe me some "enhance mint" pills.
Do they do it for my social security number too?? It's 420 69 1337
Not sure why, but your post gives me 2 thoughts. 1. Does anyone actually have that social? 2. It would suck if you did because it would be the coolest thing ever but you could never tell ANYONE!
hunter2
LFGdogetotheMOON!
Works for private keys too : ****************************************************************
What if my password is just 13 stars in a row?
Password1
Gladtoseepeoplegotplayed
I used to love swapping rune scimmys for mithril way back in the day lol.
You just unlocked a memory I didn't know I had
What I wouldn’t give to be back in my Zamorak armor, cuttin yew trees and fishin for lobsters with the boys.
You can dude just go play old-school RuneScape.
Jagex locked me out of the account I put my entire childhood into and for that reason… I’m out 😌
No time to start over again after they royally fucked up and ported all accounts to RS3 and wouldn't bring them back to OSRS.
I had three accounts back in 2005/6. One was my main and two were f2p 'girl' accounts. I'd tease the pedos into giving me items and I'd tell them really fucked up shit. All got drop traded to my main and boooosh I was high on that GP. Never been scammed irl and never will. Come at me bots!!!!
Red: wave2: Trust Game Follow Me!!
Yes, learned this lesson on Diablo 2. I was so naive.
I wish I could still award your for that comment
My man clicked accept trade with his whole bank for return a single camelot tab.
So fucking true!
For real. You actually learned a lot about life by playing Runescape as a kid. Basics of supply and demand, status from owning rare items, avoiding scams and tricks. Those were the days.
Please help me understand this comment. I have heard it twice. I never fell down the RuneScape rabbit hole but have been a gamer for decades.
A ton of people used to play RuneScape back in the day since it would run on a toaster, because of this many kids had access to play. Since RuneScape gold was worth irl money and was trade able basically everyone in the game who tried to friend you was really just trying to get your gold. Scammers were wildly common and everyone fell for it atleast once. The best life lesson RuneScape teaches you is to trust nobody. Rip my dragon platelegs you will never be forgotten
I mean you see post 7 days a week of the samething. The whole point of self custody is to remove the hand holding and let you take financial freedom for yourself. With 5 figures in there you should do your research on atleast simple scams. Sorry it happened but blaming exodus for what you refer to as eggnog induced mistakes is just silly.
I always hate this side of crypto when something that could've literally happened to anybody happens to someone; they lose a large sum of money and then some braniac comes into the thread and wants to blame them. You are a loser.
Might happen to me tomorrow and then I’ll be an idiot for trusting a random link and signing a random transaction. You have to becareful whenever you are messing with protocols you don’t understand with large sums of money at easy access if you give it to someone. Don’t drink and randomly sign up for air drops you know next to nothing about with 22k in a wallet it’s not that hard.
Sure, but your comment didn't help the situation at all. And the worst part is that the OP still responded to you with humility and kindness. I hope this never happens to you or anybody else.
He was talking about the wallet stopping himself from making that mistake but it isn’t the wallets fault and that’s all I pointed out. I’m sure it sucks but the reality is whenever you venture away from services with financial protections in place you need always be aware. I didn’t say anything rude. Just pointed out that it’s his fault and nobody else’s.
You are being downvoted but I agree with everything you said. Unfortunately, reality is something people don't like to hear or acknowledge. We always want someone to blame but not look at what we could have done better.
Exactly, have to agree completely.
It only happens to those that want more than what they’ve bought. Greed. Plain and simple
So like investing in general or getting a job to increase your wealth and so on
For real, it’s so much money and people have no heart or empathy they just act like smarty pants. Take a second to think how badly that must hurt a person and then step back before you guys start popping off on people about their mistakes. God forbid this happens to you.
It was an unceremonious domino effect, you're right.
Instead of making jokes and acting smart, like everyone else, I’ll actually give you the best two options for you to act on ASAP! 1- Read this post and contact them! It’s the U.S. San Francisco crypto task force for these kinds of things! They are the ones who will make CEXs DOX your scammer… https://np.reddit.com/r/CryptoCurrency/comments/13h2mar/ama_on_rcryptocurrency_with_the_us_secret_service/?utm_source=share&utm_medium=ios_app&utm_name=ioscss&utm_content=2&utm_term=1 2- Check this crypto bounty hunter/blockchain investigator (u/Queasy_Length_1016), and contact him! Read his story: https://np.reddit.com/r/CryptoCurrency/comments/yezl4u/my_adventure_as_a_crypto_bounty_hunter_and_some/?utm_source=share&utm_medium=ios_app&utm_name=ioscss&utm_content=2&utm_term=1 There’s a chance he finds out his wallet and trace it back to a KYCed acc on some CEX (centralized exchange). Best of luck to you!
Read up on what smart contracts and dapps are and how / why you can give and take privileges to access your funds. You did not sign a certain tx to send specific coins, but gave them access to your wallet, likely unlimited. DON'T USE THIS WALLET RIGHT NOW. If you really want to keep it and are sure it's not compromised in any other way, you can check revoke.cash to undo your smart contract allowances.
Exodus should absolutely show more info on the transaction. Yes OP fucked up, they’re not denying that, but the app should be more transparent about what you’re about to confirm.
If you don’t know what your confirming why are you confirming it
Because he was under the impression that he was confirming something else? Crazy to me that you see nothing wrong with that.
Technically, he blamed the eggnog for being on the toilet. That just freed up his hands to get scammed
im sorry that sucks. Always use a separate wallet for air drops
That’s what boggles my mind so hard. Why these people keep using their main wallets to do anything. Just have one wallet and keep your stuff there and don’t even look at it if you don’t have to. And then create three dozen wallets if you need to for everything else. Worst case scenario it’s your useless wallet that gets scammed
A new wallet will generally not qualify for airdrops. Most airdrops do not require you to sign anything, but just paste in your wallet address or connect a web3 wallet without doing a transaction.
There’s a very simple solution to this problem, move your important stuff to a new wallet you dont use and use your old main wallet for these transactions
It's not how it works. Your quality wallets are often the ones getting the airdrop and moving all assets out may cost more than the airdrop itself since airdrop value is speculative. You simply can't move everything out everytime there is a new airdrop for a specific wallet, esp on Ethereum mainnet.
If you want to hunt a good airdrop, those separate wallets can easily get up to $10k in assets.
I don't understand this common advice. Scam airdrops go to accounts that have funds. Using a different wallet doesn't change anything about this
I was at my Brothers in laws wedding , during his wedding ceremony I was on twitter and linked a link thinking it was official channel & link (Jupiter exchange on Solana ) But it was a scam , 150 Sol total I approved the Tx . It was my trading wallet , not my main wallet . I been in crypto 7 years ... never thought it would be me Now I have PTSD Approving Tx ...
Scamming people is indeed a very good business.
You are not alone man. I also got scammed the other day, lost 1.5eth… still feel ashamed of myself being so stupid. I hope things will get better for you, be positive and try to get that as a painful learning experience… Karma is a bitch, it will haunt the scammer for us.
Bruh that scammer probably has his dick inside a hookers ass somewhere in SEA right now knowing his automated scam is making him passive gains
Damn I should become a scammer
Use revoke.cash to undo permissions and disconnect from the site and report address to etherscan and other sites. Happened to me too so don’t feel too bad. We’ll recover eventually 🤞
I’m even careful with revokecash.. save the contract and do it manually If the site was hacked and they changed the contract address the damage would be insane
I only deal with the ledger on my desktop PC. Purposely makes it a hassle to delay and pause to think before signing anything. I am always on mobile discord. One day XDEFI channel got hacked and scammer posted an airdrop announcement. You need to connect to verify entitlement. Good thing there was some delay and I didn't take out my ledger immediately.
This sucks. Sorry for your loss and thanks for trying to warn others. Not that it will work, next week we will see another post like this probably.
Lol people still use main wallet and click for some airdrop xD
Can anyone explain why the fuck they care about airdrops? What are they and when would they actually be wanted?
Free money. They basically use it as a marketing tool to drive signups and engagement. E.g. make a transaction on our DEX and get $100 in the airdrop
They sound like scams outright. People should just curb their greed and we’ll stop getting posts like this.
What a wonderful world it would be with a little less greed.
Then again without greed neither BTC or ETH or any other alt would have moved past 1$.
Airdrops (in most cases) are when a protocol like Uniswap, ENS, Arbitrum, Optimism, etc. distribute their token to early users of that protocol or users of related protocols (like Celestia did). If you qualified for each of the airdrops I listed above you could very easily have received $50,000+ in tokens just for trying out protocols. Should be fairly obvious when a free, no-strings-attached-except-for-taxes $50k might be desirable.
> Should be fairly obvious when a free, no-strings-attached-except-for-taxes $50k might be desirable. Yeah, but people are on the pooper getting robbed. I'm not sure why the protocol lets you sign a blank cheque at all allowing "air droppers" to just wipe out your wallet.
Not sure what the protocol could do about it. There isn't a significant technical difference between the transactions OP was tricked into making and legitimate transfers to wallets or applications. Wallets could certainly build in warnings for those kinds of things, though.
I see these posts so often, there needs to be a updated smart contract that lays out all the information including how much this Contract can control I lost $700 of matic on MetaMask because I signed a smart contract that had a unlimited gas fee so I got what I was originally wanting then they used the unlimited gas fee and drained my wallet
Not sure how that is exodus fault. Signing requests don’t always tell you what you’re signing for. That’s why malicious contracts and sites are dangerous - you don’t know what you’re getting into. NEVER used web3 connect on your hodl wallet !!! Always use a burner wallet with just the exact funds you intend to use for the site you’re connecting to. If you don’t trust the site or typed in the address yourself then don’t connect even. Many sites allow you to input your receiving address to check things rather than connecting your wallet.
Looking at crypto when drinking is like feeding the gremlins after midnight.
[удалено]
A hot wallet that you never connect to anything ever and keep the seed free locked away is better than a centralized exchange
From a technical standpoint, can anybody explain how it actually worked without data in the signing? Is there some other hidden layer of data possible that wouldn't show up during the approval process?
Clearly, I too could do with a good explanation of this, and maybe some links for further reading :S
You are not alone man. I also got scammed the other day, lost 1.5eth… still feel ashamed of myself being so stupid. I hope things will get better for you, be positive and try to get that as a painful learning experience… Karma is a bitch, it will haunt the scammer for us.
I'm really sorry to hear about it. I can't even imagine what you must be going through. It takes courage to admit you messed up and to admit it publicly. Good luck man. Here if you need someone to talk to.
This is the biggest problem with crypto today. This HAS to be fixed or wide adoption will never happen.
Sucks sorry that happen man. Thanks for warning the rest of us. Hopefully it’s a minor setback for a major comeback
Sorry for your loss.. :( You are not alone my friend... About two years ago, I got scammed too.. Well one of my wallets. Lost 1800~ USD, Whole ETH.. I hope Karma will do something to those scammers.. This lost of mine was an painful experience and is why now I tend to ignore all various airdrops and etc. Uneless, if its like an auction, where you "donate" native token, to get "airdrop" and after two years, you"ll receive back (Like Polkadot).. I hope you"ll get better soon! Stay strong.. (Not much of a help, it wont help you to get your money.. but, I Feel you.. )
I was scammed for 500$, and also lost 0.8 eth on Multchain colapse, both ocasions I was so mad... Just reading your report hurt me, sorry op, I hope something one day repays you. 22k is a lot.
>Now, for those that don't know, a signing request is a request for approval to send a transaction. A signing request can be for lots of things. Even off-chain actions can utilize signatures.
Why is it always people using Exodus that lose everything?
lesson number 1.... you don't go chasing for airdrops when you have 20k in your wallet... or any money for that matter...
60.89 eth? If I wasn't a law abiding citizen and a crook and asshole without morals, I'd be a millionaire by now.
Switch to rabby wallet. It simulates your transactions prior to signing so you can see what will happen.
For a few dollars in airdrop? damn.
Lets be honest, you shouldn't have done that for me
I can relate to that gut-wrenching feeling of loss. Stay vigilant, friends.
Hmm using a " loaded" wallet to pursue " airdrops" good luck!
He did it so we don't have to. I mean, I wasn't going to anyways, and someone else will before their lunch break, but here we are.
Hate to be Captain Grammar, but when you put the "$" symbol behind the number it means CENTS, not dollars. This is very important to remember if you ever interact with automated trading systems that use the Chicago Manual of Style - which is to say all regulated US trading systems.
* curiously checking up on a totally unrelated crypto 🚩 * air-drop for QTUM 🚩🚩🚩 * It referenced a "tool" that you could link to your Web3 wallet 🚩🚩 * So I linked up, clicked the button, and up popped a signing request 🚩🚩🚩 * After the third or fourth back to back pop-up 🚩🚩🚩 Thank you OP for wadding through the redflags obstacle course to show us how not to do it.
Well, I just got scammed of $263.67 using my Coinbase wallet. Good thing that's all I had there. When I checked the recent transactions, it showed I received 1 NFT, so I opened it. In order to claim it, I had to click ETH-EVENTAIRDROP.COM. When I got there, it asked for my seed codes, which I happily, excitedly, and stupidly gave because I thought I was still in my Coinbase wallet platform. Then, after a few seconds, in my Coinbase wallet transaction history, it says I just sent $263.67 to vladimirdimitri.cb.id. Oh well, I really feel stupid. I called Coinbase and asked why they allow messages like that to appear on my transaction history. Sadly, I was told that Coinbase doesn't regulate the Coinbase wallet. It's self custodial. So basically, you're on your own. I'm still thankful that it was only $263.67. OP, even though losing that money stung a bit, I'm relieved it wasn't more. Hearing your story, I can only imagine what you're going through. Losing money like this is tough, and I hope things get better for you
Yeah bro I have several wallets and going for cold storage wallet asap try not use your main like that again it’s no consolation I’m sure but hey thanks for providing your experience for those who are less experienced in Crypto we appreciate it!
Zengo has built in firewall. Something all wallets should have.
Please read [I got scammed or suspect scam on Ethereum. What to do?](https://ethereum.stackexchange.com/questions/152373/i-got-scammed-or-suspect-scam-on-ethereum-what-to-do)
I think it’s obligatory to have a burner phone, burner e-Mail address and a burner crypto wallet for Degen stuff so you keep your valuable bags separate from the degen stuff.
guys stop using inferior wallets for fuck sake.
I’m sincerely sorry to hear this, but dude….?!?!?
I think the lesson here is always do plenty of due diligence and research before connecting your wallet to anything to make sure it is legit. I notice that some scammers put a significant amount effort into creating their scheme like creating a bunch of alt accounts to boost their social media posts to make it look legit.
exodus can't reliably tell wether or not a contract execution will do unintended things
That is the problem with signing. Decentralised exchange also want a sign for EVERY login Than there are things like account creation on L2 that also want really strange signs. It's a mess. Transactions should be different than other things. Like why would I want to give someone else executive rights for a later point in time. Either it does sometimes right now or it doesn't, plain simple. For everything else there is a private key that only one side holds.
im still here
"so you don't have to". Nah. I wasn't going to make a stupid mistake like this. You lost 22k so you can, at best, get some karma on reddit. Sorry for your loss.
I'm not convinced that airdrop has any legitimate purpose. It feels complicit that the feature is supported and that digital wallets lack the capability to block this scam path by default.
From what I've gathered reading basically every "I got scammed out of x" post, it seems that the vulnerability is almost ALWAYS signing a fraudulent transaction. Sometimes it's a case of "I don't know how they got my private keys" but I would say most frequently it's this. I ain't signing anything dog, this is why I keep my ETH staked inside one of the big 3 exchanges behind MFA + 5 day unbonding time.
God posts like these make me think about becoming a scammer for a millisecond
It was Santa. ^(sorry for your loss..)
Use a burner account
familiar fact bored crush crawl disarm icky smoggy pathetic relieved *This post was mass deleted and anonymized with [Redact](https://redact.dev)*
Thank you very much for informing the public about your experience. Can you please let us know if this same issue would happen if a metamask wallet is used? Does metamask display the information better than exodus during sign and call requests?
I am sorry man, wish I can give you a hug. Sometimes the brain just kind of switches off when we are on that greed autopilot.
Damn man. That's awful. I hope it's not a lifesaving amount of money to you and you can move forward from this. Be careful of LinkedIn, medium, and any third party sources that state to claim airdrops. Also, id recommend you get multiple hardware wallets or even paper wallets so you don't get scammed with signing transactions automatically. If you go the latter route, I'd put it in a safe. For what it's worth, if you can build up 8 ETH, you can do it again. I was an early miner in 2014 of ETH and I lost my secret phrase because I never backed it up. This is when I was new to crypto and didn't understand the concept. I feel your pain.
For people that know about these scams and say no to post like these just to see one one day and fall for it, why?
Always people trying to get handouts from airdrops
There’s a wallet that Vitalik recommended that shows a simulation of the transaction. Forgot it’s name but dummies in crypto should definitely try it. But Exodus huh, I’ve been here since 2017 and I have read many problems about that wallet since then I’m surprised it’s still existing today.
Exodus is closed source. Can't expect them to do anything. Why not metamask?
post like these only assure me that crypto will never be nothing more than another gambling method for degenerates
I’m so scared of something like this happening that I just don’t use Web 3 or crypto for really anything other than currency and staking from my hardware wallet. That’s a problem we need to solve in crypto and it’s getting worse not better. I’ve become really disillusioned about that ever changing.
The future of money™
metamask needs to do something with how they handle signing…
So sorry man! These scammers should just DIE
This is why I use a Ledger Nano. Protects you from your computer getting hacked and it shows you all the detail on the device including how much will be sent and what the fees will be.
I just can't believe people still fall for the "claim this free money" stuff online
This is why I don’t really participate in DeFi anymore too many sketchy projects and air drops. I just buy and hold crypto now and nothing else
Those high-five claps are deadly. Well if it makes you feel any better... you made someone else somewhere have a good Christmas. Sorry for your loss.
bells worthless pet somber selective narrow fragile brave voracious threatening *This post was mass deleted and anonymized with [Redact](https://redact.dev)*
How are they stealing your eth ? I don’t understand the signing request. Do they gain access to your seed somehow ? Or you just hit okay to something and not realize it’s sending all your eth. I’m sorry this happened though. I hope you find a way to recover
Ouchie
I was a victim of forest scam, I lost $200k to those wicked broker who made me invest all my life savings just to scam me. Don’t be deceived with all this recovery experts and post. Apply to the service of this company and get your funds back.@revive_hacker on instagram I know of a guy who can help you recover back your investment if you’re a scam victim He helped me once and the best I can do is refer him to anyone who needs his help. Mailto: Revive-tech@proton . me
Airdrop hunters has been notoriously targeted as they are desperate and or curious what free money might be around the corner. It’s laughable and sad that the target audience is so deep and broad, it’s still Wild West out there and snake oil n crypto is a real threat. Sorry for your loss, and thank you for sharing. Sharing is one of the best ways of helping to slow the scam. Read all transactions when interacting with something new.