Money was stolen, smiles were shifted 🙂‍↕️

After being in the circle for years, I've experienced being scammed three times in total. The first time I lost 500u when someone contacted me on Telegram, claiming to have insider information. I rushed in, only to find it was a Pi Xiu scheme. The second time, I lost 3000u when I was added to a scam Telegram group where someone said I could send ETH to a specified address, and their MEV contract would automatically run, helping me arbitrage with a 10% profit each time. I tried a small amount once, and it worked, so I increased my investment, and then… The third time, this time!

The process was as follows: I always thought using GMGN to trade was convenient, but since I had a job, I couldn't carry my computer everywhere. I searched the App Store, and there it was. Without much thought, I downloaded and opened it. The interface was identical, and when I clicked the connect button, it didn’t redirect to a request for independent wallet authorization; instead, it asked me to enter my private key directly. At this point, anyone who was awake should have sensed something was off. The web version didn’t ask for the private key! Looking back, I was completely out of it and entered my private key directly. At this moment, the private key should have been recorded on their server. This was mistake one! Then I entered it again without any response, and I angrily deleted the app. If I had quickly stopped using the wallet at that time, it would have been fine, but I didn’t take it seriously.

A few days later, I wanted to trade again. This time I went to the GMGN official website and found the download link for the TestFlight version, the icon had a small yellow dot, it was the genuine version. I thought, now I can use it with peace of mind! Then I found out that this app logs in through the official Telegram bot for authorization. I first entered my private key on TG to bind my wallet. During this process, I didn’t click on any TG bot ads or accept any private messages, and after completing it, I didn’t pay attention anymore.

Then, just like in the picture, I opened my independent wallet today to find that my money had been transferred away. Here is the thief's address: BDU9syMVLfigJTLyYcyP7n85ryrv9MNbhXkE3HJWMxda

At first, I thought it was a problem with TG or that I had downloaded the wrong GMGN, but later I remembered this issue. It should have leaked my private key when I downloaded the wrong version.

In summary, private keys are extremely important!!! It’s easy to say, but you really have to be extremely careful. Let this post serve as a warning!