Web3 security firm Blockaid recently reported another significant security breach that Angel Drainer carried out. The notorious phishing group is said to have drained 128 crypto wallets of their funds.
How These Wallets Were Drained
Blockaid revealed in an X (formerly Twitter) post that Angel Drainer phished users and led them to a single Safe (formerly Gnosis Safe) Vault contract, where the group then managed to drain these wallets of over $403,000. The incident, which began at 6:41 am on February 12th, is said to have begun with the phishing group deploying a Safe Vault contact to lure these users.
Oblivious to the scam being perpetrated, these users signed a “Permit2 with this Safe Vault as the operator.” This Permit2 exploit allows these hackers unlimited approval to move these funds across different smart contracts. Meanwhile, Blockaid noted that this wasn’t an attack on Safe, and its users are not “broadly impacted.”
Angel Drainer is said to have used the Safe Vault c
We współpracy z: https://bitcoinist.com/128-crypto-wallets-drained-attack-your-money-safe/
