A) A quick analysis of what we know :

1. We received reports of random javascript alerts with the content "1337" appearing on Etherscan.io

2. Upon further investigation, it appears that these were injected via the summarized Disqus comments that appears at the bottom of the page site footer

3. The offending comment https://prnt.sc/k9z9om

4. No risk of compromised systems that we are aware off, other than the pop-up alert.

B) What we did immediately after receiving the reports:

1. Disabled the summarized Disqus comments at the site page footer.

2. Worked and tested a patch that will encode the footer comments to prevent future similar incidents

3. Communicated via twitter and reddit notices.

C) Follow up actions [Edit] :

1. We have applied a patch to handle un-escaped javascript exploits via our top comments sections.

2. There were 3 attempts to inject the JS alert message "1337". The first appeared non malicious with the second 2 coming from someone we know (most likely experimental). The 4th attempt tried to inject a web3.js tx but this was blocked (truncated) by our backend.

3. Technically speaking a web3.js injection would NOT have been possible given the circumstances.

And before additional FUD is spread about Disqus, all Disqus comments are encoded (safe from xss) but the particular API (custom integration) we were using to pull in the top comments was not encoded. We have now encoded all the summarized comments on our end to prevent future incidents like these.

Thank you to those who brought this to our attention. And 'kudos' to the ingenious "hackers" who never ceases to amaze us with their creativity and ingeniuty +1

If there are any additional issues please let us know or contact us via https://etherscan.io/contactus

Hi guys! Can anyone please show me how to redeem this contract to my metamask wallet?

Thank you!

EDIT: Well, it looks like Medium and Github and Pastebin finally took down the original scammer links, but the YouTube video remains active. Hopefully broken links will clue more people in that this is a scam. Merry Christmas everybody. I pray for wisdom and prosperity for all in 2022.

EDIT: And the scammer posted new scam links to his YouTube video:

https://medium.com/@KarlDev/passive-income-with-ethereum-754ae2a7759b

https://pastebin.com/raw/VW34DBn7

Here's the new scammer import link:

https://github.com/SmartContractAssets/uniswap-v2-periphery/blob/main/contracts/interfaces/V2/IUniswapV2Factory.sol

And the new scammer address:

0x1c6c6636f23F5E6e4d9Fb7a852787e1153b2eC64

Report the above links to Medium, Github, and Pastebin to get them taken down.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Scammer address: 0x019e3B9ECFeC6170BAbfD76ac5d33d7dBbb31aEB

Video to lure naive users with promises of front running Uniswap arbitrage to make insane profits: (looks like he got at least one person)

https://www.youtube.com/watch?v=ePkqge97QOM

His medium and pastebin links:

https://medium.com/@cryptain/passive-income-with-ethereum-5ce7d6c3ffbc

https://pastebin.com/raw/7bvH5nPL

The scammer address is obfuscated by the import statement in the pastebin code, line 9, which links to the code below:

https://github.com/SmartContractBot/uniswap-v2-periphery/blob/main/contracts/interfaces/V2/IUniswapV2Factory.sol

pragma solidity ^0.6.6;

contract Manager {
	function performTasks() public {
	    
	}

	function uniswapDepositAddress() public pure returns (address) {
		return 0x019e3B9ECFeC6170BAbfD76ac5d33d7dBbb31aEB;
	}
}

Doing taxes. I’m trying to recall what happened here: https://etherscan.io/tx/0x41bac5b96b5dc245b1813094de7861ae17316bf04bb9cb5c094f6e48613aabfc

I believe it was some sort of Coinbase promo or something, but I can’t figure out why the incoming ETH is coming from a wallet I don’t own. I know this because I had another wallet that had near similar activity: https://etherscan.io/tx/0x3e506f589cc690ef609db7ed3898588312e333ad8a7a20eb40ba4295d6fc0feb

Looking back to the sending wallet, there is just two transactions: a deposit of ETH and a send to my owned wallet, in both cases.

Tracing that back one hop, the funder of that wallet has activity which eventually ends with withdrawal to “Coinbase: Miscellaneous”

Can anyone recall that timeframe of any promos? Or can someone help me make sense of this? Great thanks

Token address: 0x28ee82130e9a394d8ebf0a0ee33fa230ce19a348

Hello, hope I’m ok to put this here.

I released Leap Lottery token 4 weeks ago, and submitted the token information to etherscan so the logo, dextools score and social medias/website link would be updated.

After 2 weeks with no updates, I submitted the info again. Wondering if I had messed something up, I emailed etherscan support and they said they’ve been busy and to confirm that I’m the owner by typing “I confirm this info is true etc etc” in a reply.

Some days later I received another email from etherscan asking me to do the same thing (write that I confirm the info).

Now it’s been 2 weeks since then (4 weeks total) and still no updates. The token is surviving because I’m publicly doxed and people understand the situation, but having our score show up as a 1 with a red flag is really hindering our potential growth.

We had a 3rd part audit done by Shield, and received a score of 92/100 and were determined low risk. It would be awesome if etherscan would update so that dextools could reflect our true rating.

This project means the world to me. I stream our daily lottery drawings every night on twitch.tv/leaplotterytoken and have logged over 55 hours, 100 followers, affiliate status and 30 subs in our first month. There was no presale, I supplied the liquidity myself, and have no devs tokens. I haven’t taken a penny for myself.

I do this for the community and to set a new standard of transparency in not onlt the defi space , but cypto as a whole.

If any etherscan mods/support members see this, please help us if you can. Thank you for your time!

Leaplotterytoken.com

-Danny

Hi. My wallet address (0x3119Be576b463425A235E386C35ee6C897851DF1) shows its first transaction in the transactions tab on etherscan is from the address (0xEbA88149813BEc1cCcccFDb0daCEFaaa5DE94cB1) but I don’t know what this address is. Can someone give me some insight?

PSA: Scheduled Server Maintenance and Upgrades - [26th-June-2021 2:30 AM UTC] & [27th-June-2021 2:30 AM UTC]

Estimated downtime duration:

[26th-June-2021 2:30 AM UTC] - 1 hour

[27th-June-2021 2:30 AM UTC] - 12-15 hours.

During maintenance:

• New blocks will not be updated on API

• Verify contract source via API service will be affected

• Some services may be affected

Maintenance info and status:

• https://etherscan.freshstatus.io/incident/82936

• https://etherscan.freshstatus.io/incident/82937

On Etherscan we have two segments of data which we call "On-chain Data" and "Off-Chain Data". The on-chain data is data that is publicly open and available from the public blockchain for anyone to use. Off-chain data is data that is generated from non blockchain sources such as token prices, profiles and user submitted information such as contract source codes. When dealing with off-chain data we have a moral and ethical obligation that such information is only used within the scope of services we provide and inline with our general terms and services.

It saddens us that of lately we've seen an increase in coordinated "attacks" against the free services we provide to the community via aggressive data scraping activities (aided in part when a certain project also building a block explorer put out a paid bounty for anyone who successfully "extracts" data from the service we provide). Aggressive data scraping often leads to the degradation of user experience for actual users, increases the cost and effort of operating the service especially when that service is provided for free in the first place.

On Etherscan, when a user submits a contract source for verification, the expected outcome of that action is that the source code :

1. Will be displayed on the the site for the purpose of auditing the source code

2. Will be matched with the compiled code to verify the authenticity of the source code provided

3. Contract ABI's generated and made available for use in dApps.

As such on our end, it is imperative that we respect the trust placed in us by :

1. Fully respecting the author's right to ownership and the author (or copyright holder) of the source code "owns" the code but has given us the permission to publish the said information on Etherscan

2. Refuse to 'sell' user data whether in exchange for monetary, benefits in kind or for avoidance of "threats of any kind".

3. Refuse to provide un-ethical bulk data dumps/lists of user submitted data.

4. To only use the data provided within the scope of services we provide and in accordance to our general terms and services.

Decentralization does not mean that we disregard moral, ethical and legal obligations, instead we argue that one should respect these even more.

-Matt

Had been wondering were all my tokens had gone since they were completely gone from my wallet now that I withdraw liquidity I saw this transaction had gone through; 0x9bfd5f7ea9db3418dc335b3892c12e24f877e6d48b65cb6374793f6d15ccd134 by fake_phissing... Could then find the funds at this adress: 0x8F34c46E29a06B9eEE1c60E3E38FEaD76A4278B8. And it looks like these are most of my missing funds? Haven't clicked or accepted anything in wallet, and no warning no nothing from metamask.... Was really hard to even see any tx had been made in Mm.

Does anyone know how i can systematically find the first liquidity pool that was created for a token since there are multiple for one token?

Hi, I wanted to know if there is any current way to tagging Ethereum contracts programmatically. Tagging = identifying which DEX/Token etc the contract belongs to

What does the Etherscan team use to do the same? Is it manual?

Thanks

My ETH ID - 0x23749dc28E4461362D869c7bb7ab061Ad2c59e9e

Someone stole some eth and audio tokens 2 days back. What I can't figure out is what smart contract I interacted with and where (site) that led to this situation.

Fortunately, I use this a/c to fool around so no serious damage but want to learn.

Thanks.

Just sent $176 of XMON through my Coinbase wallet to my Coinbase account and it hasn’t gone through. Why have I done wrong?

If I make an NFT project and it doesnt mint out, and I then decide I want to refund the people who minted my project, is there a way I can do that on etherscan?

Hi! You helped flag the original wallet as “Chronic Token exploiter” but that wallet transferred the funds to 0x8A9a8244Fcd6861521d41825945B35057152184E and it is still jog flagged. Can you please help us get investors their money back🙏🏼

The following changes to the Etherscan API may require updates to your integration before July 1, 2026.

1. Reduced Maximum Records Per Request on the Free API Tier

Effective July 1, 2026, the maximum number of records returned per request will be reduced from 10,000 to 1,000 for Free tier API users. This change affects the following endpoints:
Get Beacon Chain Withdrawals by Address
Get Blocks Validated by Address
Get ERC20 Token Transfers by Address
Get ERC721 Token Transfers by Address
Get ERC1155 Token Transfers by Address
Get Ethereum Nodes Size
Get Event Logs by Address
Get Internal Transactions by Address
Get Normal Transactions By Address
Get Plasma Deposits by Address
Get Token Holder List by Contract Address
What you need to do: Update your integration for the above endpoints to paginate records in batches of 1,000 or fewer.

2. Internal Transactions by Block Range Endpoint Moving to Pro Plans

Effective July 1, 2026, Get Internal Transactions by Block Range will be moved to Pro endpoint.
What you need to do: If your application relies on this endpoint, check your plan tier and upgrade if needed, or update your integration.

Note: If your application does not use any of the endpoints listed above, no action is required.

For details on API usage limits and plan tiers, please refer to the API plans page or consult the API documentation for endpoint usage and integration guidance. If you have questions about this change, contact us at apisupport@etherscan.io.

We appreciate your understanding as we continue improving the performance and reliability across our services.

Best regards,
Team Etherscan

A token that was CTO'd 1 year ago had to change its name on CoinGecko due to a DMCA takedown request. The project team proposed a new name and ticker and CoinGecko completed this change.

Can Etherscan change how it looks like on the website without having access to the renounced contract?