A user lost $68 million in BTC, falling victim to a "dust attack".

[bayu7adi]

P.S. Have any of you been in similar situations? If yes, please share your story. It will be helpful for others.

Me? No. The BTC wallet that I have to date has never received a shipment of suspicious dust tokens like that. Moreover, even though I never felt like I had been attacked like that, every time I wanted to send BTC to another address, I always checked the address that I copied and pasted. At least the last 10 digits and the first 10 digits are very helpful for us to ensure that BTC is sent to the correct address. I still try to ensure that transactions run smoothly without any problems, therefore, as much as possible, every address that I paste, I always check twice or three times.

[LogitechMouse]

~
P.S. Have any of you been in similar situations? If yes, please share your story. It will be helpful for others.

Correct me, but isn't this the infamous one that happened months ago?
I can't remember it my apologies.

Anyway, like I always say, learning really is very costly. Here, it costs the investor $68 Million to learn something. Learning is expensive - very expensive that's why for those who saw this attack, learn how to secure your wallet, and double or even triple check the address that you are sending with. If possible, look by letter/number and don't just look at the first 5 and the final 5 symbols of the address.

I hope this will be the first, and last time that this happens (I doubt it will ).

[bitterguy28]

This is a weird story, and I think there's a lot of fake stuff in it.

First the sum, like rally $70 million and you don't even check the address?
Then, the only case that is actually solved and we have a nearly unknown company bragging about how they managed to get the money back:
https://www.cryptonews.net/news/security/29013603/
So the attacker was contacting the victim demanding 10% of the funds but at the same time it was moving the between exchanges...common!

It's just like a drone to monitor the transactions of the users so that they can easily victimized the user if they found a hole. I don't know what exactly their way to steal people's money since it's 100% secured one you owned the private key, but until your device is infected. If you know that you are being tracked, the best way to do is to use mixers.

There is no hack, no infection, no vulnerability, the attacker simply sends dust (small amount of coins) to different addresses that usually have interactions with other large addresses using himself an address that resembles the other ones.

So if you're use to move coins from your address to you excnge address for example  bc1q2ps0clygv8d5stq******* and you're to lazy to check and you copy paste from the history the attacker address bc1q2ps0clytv1d6sgy******* because it seems familiar you're done for.

and sometimes the wallet address is almost completely similar to that said address this is why the victims are being lured?
this is why I kept checking my wallet address several times before going into the sending , not just the starting numbers but every single degits/letters for sure transacting .

[hugeblack]

Me? No. The BTC wallet that I have to date has never received a shipment of suspicious dust tokens like that.

Dust transactions are valid transactions but less frequently occur in Bitcoin wallets due to fee costs and the primary purpose of their use is to reduce wallet privacy.it can be easily avoided by using features such as coincontrol and wallet freeze.
These attacks are more common in the Ethereum blockchain and smart contracts in general due to the possibility of a zero-value token transfer attack^[1], because you see a transaction from your wallet that you did not perform.





[1] https://www.elliptic.co/blog/analysis/the-latest-scam-zero-value-transactions-fooling-victims-into-sending-their-crypto-to-fraudulent-addresses

[NikeFit_7777]

Correct me, but isn't this the infamous one that happened months ago?
I can't remember it my apologies.

Anyway, like I always say, learning really is very costly. Here, it costs the investor $68 Million to learn something. Learning is expensive - very expensive that's why for those who saw this attack, learn how to secure your wallet, and double or even triple check the address that you are sending with. If possible, look by letter/number and don't just look at the first 5 and the final 5 symbols of the address.

I hope this will be the first, and last time that this happens (I doubt it will ).

A few months ago, I lost a couple of tens of dollars (it was phishing), not very pleasant - but quite a great experience I'll tell you.

P.S. Minimal advice on this matter, double-check what you download/where you go and in general, what you do. One sloppy move and your money = not your money (but the scammers').  I know a lot of things for safety - alas nothing is immune from it. 

[milewilda]

I do have several metamask wallets which does have tons of unknown shit coins that been sent out into my address which on the moment that you would really be trying out to see their
value whenever you are making some log in with some dex, you would be able to see that its really that a good value or involved hundreds of thousands.If you are a newbie
then you would definitely be trying to make some transaction. I dont know on how dusting attack works on how attackers would be able to get someones funds on sending out these coins.
You wont really be that putting yourself on such trouble if you are really just that sensible about on how security owrs or on how it would be done.

[Stompix]

~

and sometimes the wallet address is almost completely similar to that said address this is why the victims are being lured?

Not sometimes but always, if they would send from  completely different addresses it would be harder to trick the victim
These were the addresses in question, the attacker and the real one:
0xd9A1b0B1e1aE382DbDc898Ea68012FfcB2853a91
0xd9A1C3788D81257612E2581A6ea0aDa244853a91

Normally users only check the 3-4 first and last, you're far safer checking the middle as it would take way too much processing power to generate an address that would also match another group of characters there since they don't know where the users would look, would they look at the 6-10 or 12-16 characters.

[jeraldskie11]

~

and sometimes the wallet address is almost completely similar to that said address this is why the victims are being lured?

Not sometimes but always, if they would send from  completely different addresses it would be harder to trick the victim
These were the addresses in question, the attacker and the real one:
0xd9A1b0B1e1aE382DbDc898Ea68012FfcB2853a91
0xd9A1C3788D81257612E2581A6ea0aDa244853a91

Normally users only check the 3-4 first and last, you're far safer checking the middle as it would take way too much processing power to generate an address that would also match another group of characters there since they don't know where the users would look, would they look at the 6-10 or 12-16 characters.

How about those addresses in the exchange. Is it vulnerable to the dust attack? Because as far as I know, you can only see one address in an exchange for a specific when you are going to deposit. If so, dust attack is useless when you're transferring your assets to exchange. However, we must always double check the address everytime we transfer assets to different wallet address.

[JISAN]

WBTC is not orginal btc so such large amount of Bitcoin should not be transacted or holed through any chain other than Main Bitcoin as it is very risky. that is why he was attacked. the incident is really sad because it is a huge amount of bitcoins.  Currently we dream of owning 1 bitcoin but meanwhile he lost 1155 bitcoins amounting to $68 million. there are a lot of hackers online and they have become smarter as the technology updates so we should be more careful

[Stompix]

~

How about those addresses in the exchange. Is it vulnerable to the dust attack? Because as far as I know, you can only see one address in an exchange for a specific when you are going to deposit. If so, dust attack is useless when you're transferring your assets to exchange. However, we must always double check the address everytime we transfer assets to different wallet address.

I doubt it, mainly because the deposit addresses you use are always emptied by the exchanges and moved to their cold storage, so when bombarding addresses with dust your deposit address might look empty, not a target for the attacker.
Also, if you look in the history of your tx on that exchange you would normally look for where you have sent previous coins, right? So the attacker has no way of faking that! The deposit part might be susceptible to dush a thing but again, it's a long shot, I doubt it happens that often.

This doesn't mean that your exchange address can't be a target since it can be picked at random but the success rate of the attack should be minimal.

WBTC is not orginal btc so such large amount of Bitcoin should not be transacted or holed through any chain other than Main Bitcoin as it is very risky. that is why he was attacked.

No, it's not!

[Faisal2202]

A user lost $68 million after falling victim to a "dust attack". The monitoring platform Cyvers Alerts detected a transaction for 1155 WBTC.

I never been in this situation because from the start as poor guy, I always double-check the address, not just the initials and ends, but after knowing this scam, I check all the letters one by one. And then I proceed. BTW, the only way for a person to become a victim of this scam is, they cipy the address from explorer, or from a place where they are copying the address from the transaction details. I mean for them they send or receive assets from there wallet so they can get the receiving address from that tx details.

Using some tool the get the details and don't copy the wallet address from the wallet directly, and end up copying the address which they thought is there's. While the scammer had made a address with same intials and ends, and the viticm thought its there address. This technique is also known as address poisoning, and its in the market from the start of January 2023. I mean  its already in the market before that but the peak of this type of hack was started from 2023's january.

[SmartGold01]

This is the problems associated when not holding direct Bitcoin in Bitcoin chain than holding it in another chain or a side chain of it. The worst place to hold a coin is on 0x because it's very easy to launched an attack and again holding WBTC is not a bitcoin rather it's altcoin, there are every possibility for it to decouple making you to lose the value it's worth than the real bitcoin.

My advice, never you hold wbtc instead get a hardware wallet to store your funds and hold, sincerely due to this attacks I don't find pleasure holding bitcoin on the side chain.

[NikeFit_7777]

P.S. Nothing unusual, just someone transferred BTC worth $4,500,000,000,000 and paid a commission of only $2.8.

You know, I'm not surprised at anything anymore. Hundreds of millions of dollars are lost due to stupidity/errors, etc. Users are different and situations are the same. I think it will always be the same. People don't draw conclusions + don't analyze the mistakes of others. They should! 

[hugeblack]

P.S. Nothing unusual, just someone transferred BTC worth $4,500,000,000,000 and paid a commission of only $2.8.

In fact, he paid a lot of money. The transaction contains one input and two outputs, and he paid 4k satoshis even though he could have paid less than that.
21 sat/vB is enough to confirm the transaction, and since the transaction is simple, he has paid a lot.

[Stompix]

P.S. Nothing unusual, just someone transferred BTC worth $4,500,000,000,000 and paid a commission of only $2.8.

In fact, he paid a lot of money. The transaction contains one input and two outputs, and he paid 4k satoshis even though he could have paid less than that.
21 sat/vB is enough to confirm the transaction, and since the transaction is simple, he has paid a lot.

It was a 2 inputs tx, they paid 11sat/vb, minimum for that block was 9 sat/vb so pretty much the recommended fees.
https://mempool.space/tx/8dadc451c6f78509ffbf0637892103982830ac7ea1ee1a18cc19bf6a778be993

Also, it's not "someone" as in mysterious person,  it's the MtGox trustee that made that transaction, I don't see what's the problem with it!