#ETH走势分析 Conclusion first: Immediately check your browser settings and turn off automatic downloads. Don’t casually click on links with the device that holds your main wallet, especially suspicious ones from TG.

Just saw a case where someone lost nearly $27 million in crypto assets within five hours. I tracked the victim’s public wallet address and confirmed that about $20 million worth of assets were transferred out in batches in a short period. The victim is now openly calling out in his own channel, offering $5 million as a reward to get his assets back, but he himself feels there’s little hope.

The whole process is actually a typical social engineering attack. The victim described it in his own words:

At first, someone tried to extort him, but he didn't pay much attention and instead became interested in the other party's intelligence gathering abilities. Since he’d had account security issues before, he paid the other party to do a background check. The attacker first sent the results via a few links; he asked for them in text form instead. Later, the attacker sent a phishing site disguised as Etherscan, which, when clicked, would automatically download and run malicious software—the key point is that this method bypassed TG’s download protection mechanism.

The most fatal mistake was that he used a phone containing the second signature key of his multisig wallet to “verify” those links. The attacker also obtained his Telegram metadata. The multisig mechanism was rendered useless in the face of a single point of failure.

$BTC $ETH $XRP holders should all be alert: the weakest link in wallet security is often not technical, but human vigilance.