Between February and August, hundreds of cryptocurrency users lost funds after following malicious guides disguised as AI bot tutorials. The scheme relied on victims voluntarily deploying smart contracts that contained hidden code designed to drain their wallets.
Security firm TRM Labs released an analysis in September detailing how the attack unfolded. The investigation confirmed that the attackers did not directly hack individual accounts but instead manipulated users into executing the exploits themselves through deceptive educational content.
Key facts
- A total of 274.60 ETH was stolen from affected users.
- 224 victims were impacted by the fraudulent tutorials.
- The attack vector required victims to self-deploy malicious contracts.
- The compromised contracts were based on fake AI bot instructions.
- TRM Labs published a detailed report on the exploit in September.
- The victim deployment activity occurred between February 12 and August 11.
Why it matters
This incident highlights a sophisticated social engineering tactic where attackers bypass traditional security measures by convincing users to initiate the theft. It underscores the critical need for vigilance when using online coding tutorials or deploying unverified smart contracts, as the danger originates from user action rather than external platform breaches.