3 ms·

Thanks for the details. "Attacker sends a fake transaction of crypto from the user's address to the phishing address" Can you explain what you mean by this, h

Thanks for the details. "Attacker sends a fake transaction of crypto from the user's address to the phishing address" Can you explain what you mean by this, how this works?

sp332 3y ago
Yeah it seems insane to me too, but some kinds of transactions don't require the private key. https://www.coinbase.com/blog/zero-transfer-phishing-part-1-attack-analysis https://www.coinbase.com/blog/zero-transfer-phishing-part-1-...
tornato7 3y ago
The attacker basically calls Transfer(From your address, to phishing address, quantity 0) They can't actually transfer any crypto because your approval for that token is zero. But they can technically transfer zero tokens from your address to another one. Then some wallet interfaces pick this up and display it as a transfer.