An individual conducted a scam where they stole Wrapped Bitcoin (WBTC) worth $71 million on May 3. The scam involved creating a wallet address that closely resembled the victim's address in what is known as an "address poisoning" scheme. By using similar alphanumeric characters and executing a small transaction to the victim's account, the scammer deceived the victim. Many investors typically validate wallet addresses by confirming the matching first and last characters but may overlook discrepancies in the middle characters, which are often visually obscured on platforms.

Visibility of Looted Assets

Following the theft, blockchain investigation firm PeckShield noticed suspicious behavior related to the stolen funds on May 8. The scammer began breaking down the stolen assets into smaller portions and distributing them among numerous crypto wallets. This approach aimed to dilute the funds and make their tracking more challenging. The scammer used around 400 crypto wallets to spread the funds across over 150 wallets. Despite these efforts to conceal the origin of the funds, PeckShield's investigation has been able to trace all diverted assets back to the unknown scammer.

Decline in Crypto Scams During April

The FBI's 2023 Internet crime report indicated a significant increase in cryptocurrency-related scams that resulted in investors losing $3.94 billion last year, constituting more than three-quarters of total investment scam losses. However, April witnessed a decline in crypto losses from hacks and scams, reaching a record low of $25.7 million. This decrease is mainly attributed to the absence of private key compromises. While there were 11 attacks targeting protocols through private key compromises in March, only three incidents occurred in April.

Final Thoughts

Despite the recent decrease in crypto scams, the $71 million wallet phishing incident serves as a stark warning about the risks associated with cryptocurrency transactions. Investors are advised to be cautious and thoroughly verify wallet addresses before proceeding with transactions. The ongoing investigation will determine whether the scammer can be identified and the stolen funds recovered.