In September 2024, a wallet drainer disguised as the WalletConnect protocol stole over USD 70,000 in digital assets
ManuelRD
--
Bearish
😱😱😱 Ethereum crypto wallet was drained by malicious AI extension
Core Ethereum developer, Zak Cole, lost funds after a malicious Cursor extension stole his private key, highlighting the rise of wallet draining attacks against developers.
how even the most experienced developers can fall for increasingly sophisticated scams.
allowed the attacker to access his hot wallet for three days before draining the funds.
The developer installed "contractshark.solidity-lang", which seemed legitimate with a professional icon, a detailed description, and over 54,000 downloads, but quietly extracted his private key.
The plugin "read my .env file" and sent the key to the attacker's server, giving him access to a hot wallet for three days before the funds were drained.
"In more than 10 years, I had never lost a single wei to hackers. #HackerAlert $ETH
$BNB
Disclaimer: Includes third-party opinions. No financial advice. May include sponsored content.See T&Cs.