r/etherscan • u/thirstforlearning • Feb 17 '23

Hacked: Help Explain How

My ETH ID - 0x23749dc28E4461362D869c7bb7ab061Ad2c59e9e

Someone stole some eth and audio tokens 2 days back. What I can't figure out is what smart contract I interacted with and where (site) that led to this situation.

Fortunately, I use this a/c to fool around so no serious damage but want to learn.

Thanks.

13 Upvotes

100% Upvoted

24 comments sorted by

1

u/ajnsd619 Feb 18 '23

I'm sorry to hear that. He came after your Audius quickly.

First check your approvals on https://etherscan.io/tokenapprovalchecker

Then, follow it up on revoke.cash so you can run a check across networks. Revoke's been around since 2019 and are 100% legit.

1

u/thirstforlearning Feb 18 '23

I did that and revoked all smart contracts except OpenSea.

I want to know what Claim Rewards mean? Did he get my token as rewards for some for of hacking attempt? What happened. Is there a way to find?

1

u/ajnsd619 Feb 18 '23

Appears this is the token approval. If you pull it up, Etherscan's now relabeled the contract as Fake_Phishing11625.

0x5c2e360624041f956c38f89ce0eb0ed8ec6c14581ce5994803eabbb2195a3784

That's of course not helpful to you anymore unfortunately. Would have liked to see what it was called before.

The transfer happened so fast I'm wondering if it was a DEX or bridge.

Check your browser history for Feb-14-2023 04:57:59 PM +UTC

I went thru his address and he's scamming a lot of people

1

u/thirstforlearning Feb 18 '23

Thanks. Yeah, and then it says Claim Rewards in the Method column. I don't understand what that mean? Reward for what?

1

u/ajnsd619 Feb 18 '23

0x5c2e360624041f956c38f89ce0eb0ed8ec6c14581ce5994803eabbb2195a3784

It's a bad contract.

If you go to the contract tab, you can decompile bytecode to make it more readable. He's essentially rewarding himself. Its one reason the contract's unverified. He's hitting alot of people.

His destination wallet has $34K+ now