#Scams are nothing new, but the tactics employed are becoming increasingly sophisticated. Recently, Boring Security discovered a new scam called the "Double Up Attack" targeting
#NFT players.
1. Is conventional phishing outdated?
In the past, fraudsters would often use phishing websites to trick you into signing a "gasless" transaction, aiming to steal all the approved NFTs on that platform. This was a common phishing trick, especially with Seaport.
2. How does the "Double Up Attack" work?
Let's take the case of @pnutsdot as an example. He lost BAYC, Otherdeeds, Kodas, etc., by clicking on a fake website that claimed to offer Wormhole. It seemed like the ordeal ended there, but the bad actors wouldn't let him off easily.
3. Are there really "good people"?
Immediately after being scammed, @pnutsdot was contacted by a user named titan.eth, who offered to "help" by guiding him on how to cancel the approval on Etherscan. They even had a video call together. However, during the "assistance" process, titan.eth tricked Pnuts into revealing his private key.
4. One pain follows another
Instantly, titan.eth disappeared along with all of Pnuts' remaining assets, not only on
#Ethereum(ETH) (
$ETH ) but also on
#Solana🚀 (
$SOL ) since both platforms used the same private key. This is why this tactic is called the "Double Up Attack."
5. Prevention is better than cure
When falling victim to scams, our emotions are often in a terrible state. Fraudsters take advantage of this to deceive further. Therefore, the best way to protect your assets is to always be cautious and take security measures:
Secure your wallet diligently, and avoid clicking on unfamiliar links (a wrong click leads to regret)
MOST IMPORTANTLY: Use a hardware wallet to store your private key. Hardware wallets disconnect the private key from online devices, making it nearly impossible to steal unless you expose your seed phrase (this one's a tough nut to crack 😩)
$BTC