TLDR: #Web3Wallet #Launchpool #Launchpad #hashdit There has been an increase in the number of scams related to Defi launch pools where scammers reach out via fake social media support groups asking to users to invest in their websites such as “defipoolvip.com”, “defi-eths.top”,”defi-etha8q.site”, “defipool3.cc”, ”defi-eths.top”,”defivip.vip” etc, leading to a loss of all your funds.

Our Advice: Stay Away! These sites are designed to steal all your funds. We suggest using our  HashDit Chrome Extension to protect your wallet.

Always do your own research! If it looks too good to be true, it probably isn't!

How these scams work: 

  1. These scams are usually two part in nature.

  2. Part 1:

    1. Bad Actors impersonate legitimate entities and exploit human psychology to gain a user’s trust usually by reaching out offering investment advice.

    2. After trust has been established, this shifts into conversations relating to third party websites promising extremely good returns.

  3. Part 2:

    1. Once you have visited and connected to the site, the scammers will try to have you deposit increasingly large amounts of funds to your wallets or the dapp.

    2. The catch is that they have you confirm unlimited or very large approvals, or malicious signature requests.

    3. Once the user has provided the signature/confirmed the approval, they will find that their funds are now lost to them.

  4. Bonus:

    1. Another trick commonly used is that they will have the user initially deposit small amounts and provide high returns, slowly tricking the user into depositing large amounts.

    2. Once this happens they either ghost the user and disappear with the funds or try and trick the user into further depositing additional funds in the name of taxes and such, leading to bigger losses.

Do not fall prey to phishing links! Always do your own research before connecting to or committing to a project.

Cases

Case1: defi-eths.top/defi-etha8q.site

  1. The site claims to be a Defi Smartsaving website where the user needs to only pay a miners fee a single time.

  2. They claim that the greater the balance in the account, the greater the payout.

  3. They also promise a payout 4 times a day.

  4. They try to promote trust and safety by naming prominent audit agencies and partners.

  5. However when you try to invest, you find that the site is calling an Approve function.

  6. The function allows them to transfer a huge amount of funds from your wallet.

Case 2: defivip.vip

  1. The site sets itself up as a revenue generating site with named partners.

  2. The homepage prompts you to receive a voucher and start mining by paying just a miners fee.

  3. This triggers an Approve function call asking to approve almost unlimited funds.

  4. If approved this leads to a loss of all funds in the wallet.

 Case3: defipoolvip.com

  1. The site promises a daily payout from 1.5%-7% based on the wallet balance.

  2. They try to instill security by naming famous partners and audit companies.

  3. The catch here is that when you try to add to the pool a transfer function is called.

  4. The funds you were deposing are now sent to the scammers address.