Arbitrum’s own token scheduled for airdrop, about 3 million ARB may be at risk of theft

Pointed out the possibility of virtual currency theft

Regarding the airdrop (distribution to users) of ARB tokens conducted by L2 “Arbitrum” of cryptocurrency Ethereum (ETH), about 3 million ARB may be exposed to theft risk. was pointed out.

Arkham, a cryptocurrency analytics platform, reported on the 20th that a hacker transferred assets to about 2,400 wallets in 12 hours. It is part of the 625,000 wallet addresses targeted for airdraw this time.

The hackers then made sure those wallets were authorized to receive the airdrop. In addition, the hackers somehow gained access to each wallet’s seed phrase and private key, Arkham explained.

gm

A reported hacker on Arbitrum has been sending money over the past 12 hours to around 2400 presumably compromised wallets.

These wallets then approve the ARB token in anticipation of receiving the airdrop.

address – 0x59d4087f3ff91da6a492b596cbde7140c34afb19

Stay safe!

—Arkham (@ArkhamIntel) March 20, 2023

On the 16th, Arbitrum announced the issuance of ARB and the start of operation by DAO (Decentralized Autonomous Organization). In line with that, he explained that he will be airdropping ARB from tomorrow, the 23rd.

connection: Ethereum L2 “Arbitrum” to decentralize operations to implement its own token distribution

The issue was also reported on the developer platform GitHub. A user who reported on GitHub pointed out that 3 million ARB could be stolen if nothing is done, and it is possible that these wallets have already been hacked and the “Sweeper Bot” has been implemented. I thought there was.

Sweeper bot risks

A Sweeper bot is a code assigned to a blockchain address that can automatically send assets. The MetaMask team explained earlier this month that the ability to automatically send money from one address to another is useful, but can be abused.

The 2,400 wallets in question are believed to have the Sweeper bot installed, and the allegation is attracting attention. Currently, the only way to prevent theft is to revoke (revoke approval of) the contract that the hacker created.

connection: Explanation of points to note when using Web3 wallet Metamask

As of this writing, the Arbitrum team has not made any announcements regarding this matter.

The post Arbitrum’s own token scheduled for airdrop, about 3 million ARB may be at risk of theft appeared first on Our Bitcoin News.