[Coin World] After Yearn was attacked, a so-called “white hat negotiation” message suddenly emerged on-chain - be aware, this thing is fake, purely phishing. The method is exactly the same as the previous Balancer incident.
Interestingly, this group of people used the Railgun protocol to hide their identities, preparing low Gas fee addresses 28 days in advance, with a deep layout. After completing their actions, they directly washed out 1000 ETH through Tornado Cash.
Currently, the attacker's wallet still holds approximately $6 million in crypto assets. The on-chain records are fully traceable, but identity tracing is basically dead.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
8 Likes
Reward
8
4
Repost
Share
Comment
0/400
ImaginaryWhale
· 15h ago
Damn, this trap is really impressive, lying in ambush a month in advance, even fake negotiations with the white hats.
The Railgun + Tornado combo move, this guy really has something going on.
It's both fishing and a 28-day warm-up, hackers are really in a race to the extreme now.
It seems Yearn has really been taken down this time, 6 million dollars just vanished like that.
This wave of tactics is much harsher than last time with Balancer, the details are designed to perfection.
Fake negotiations with the white hats? Wow, almost got tricked, luckily I saw this message early.
On-chain traceable throughout, yet can't find the person, this is the paradox of Web3.
Tornado Cash has done it again, the coin washing artifact really lives up to its name.
After a month of plotting before taking action, this isn't a hacker, this is a professional manager.
View OriginalReply0
GateUser-5854de8b
· 16h ago
White hat negotiation? Ha, here we go again, do they really think we're all fools?
Railgun+Tornado one-stop service, this guy has long thought about how to do a Rug Pull.
6 million just floated away like that, visible on-chain yet impossible to catch, quite ironic.
Laid out 28 days in advance, this cunning plan deserves my applause.
Feels like Yearn is really a bit awkward this time, where's the defense?
Another fishing trap, the tricks in this circle are really getting deeper.
Hiding identity counts as a win? Eventually, they'll still have to show their true colors.
View OriginalReply0
HodlAndChill
· 16h ago
I knew these people would want to play the "white hat" trick again, same old routine
---
Wait, Railgun laid the groundwork a month in advance? How cautious is that, what about our security awareness
---
It's Tornado laundering coins again, how come there are still 6 million not withdrawn, that's not scientific
---
The fishing tactics are becoming more similar, by the way, we need to teach newcomers how to avoid traps
---
On-chain verifiable but identity can't be traced, that's the most heart-wrenching part
---
After suffering losses from Balancer, they want to do it again, hacker aesthetic is on point, haha
---
I just want to know when to sell these 1000 ETH, which exchange was chosen
---
They waited a month before taking action, this mentality is unparalleled, simply professional
---
As soon as I saw "white hat negotiation" I knew it was a trap, good heavens, did someone really fall for it
---
6 million still not cleaned up? Or is it just to attract attention?
View OriginalReply0
RugDocDetective
· 16h ago
Layout 28 days in advance, the attention to detail is truly exceptional, simply a textbook-level writing case.
The Railgun + Tornado combination attack, there’s no way to follow, this is the "perfect crime" on-chain.
White hat negotiation? Ha, old tricks again, still the same saying: the first reaction to seeing negotiation news is to not touch it.
Yearn Attack Incident Revealed: "White Hat Negotiation" is a Phishing Trap, Hacker Laid Plans a Month in Advance
[Coin World] After Yearn was attacked, a so-called “white hat negotiation” message suddenly emerged on-chain - be aware, this thing is fake, purely phishing. The method is exactly the same as the previous Balancer incident.
Interestingly, this group of people used the Railgun protocol to hide their identities, preparing low Gas fee addresses 28 days in advance, with a deep layout. After completing their actions, they directly washed out 1000 ETH through Tornado Cash.
Currently, the attacker's wallet still holds approximately $6 million in crypto assets. The on-chain records are fully traceable, but identity tracing is basically dead.