BTC $81,065.71 +5.90%
ETH $2,637.31 +7.57%
BNB $764.57 +4.33%
XRP $1.41 +8.57%
SOL $113.91 +12.64%
TRX $0.3384 +1.01%
DOGE $0.0879 +7.45%
ADA $0.2232 +10.32%
BCH $253.85 +9.41%
LINK $12.39 +9.21%
HYPE $92.33 +10.53%
AAVE $139.59 +8.25%
SUI $0.8083 +10.30%
XLM $0.1946 +4.45%
ZEC $1,482.99 -0.83%
AAPL $335.65 -0.46%
AMZN $254.14 +1.24%
GOOGL $350.07 +0.91%
MSFT $494.25 -0.64%
META $668.23 -1.96%
NVDA $221.70 +1.08%
TSLA $364.21 -0.55%
SNDK $1,789.46 +10.80%
INTC $109.05 +0.11%
SPCX $152.43 -1.73%
MU $1,015.26 +3.60%
AMD $557.74 +2.31%
BTC $81,065.71 +5.90%
ETH $2,637.31 +7.57%
BNB $764.57 +4.33%
XRP $1.41 +8.57%
SOL $113.91 +12.64%
TRX $0.3384 +1.01%
DOGE $0.0879 +7.45%
ADA $0.2232 +10.32%
BCH $253.85 +9.41%
LINK $12.39 +9.21%
HYPE $92.33 +10.53%
AAVE $139.59 +8.25%
SUI $0.8083 +10.30%
XLM $0.1946 +4.45%
ZEC $1,482.99 -0.83%
AAPL $335.65 -0.46%
AMZN $254.14 +1.24%
GOOGL $350.07 +0.91%
MSFT $494.25 -0.64%
META $668.23 -1.96%
NVDA $221.70 +1.08%
TSLA $364.21 -0.55%
SNDK $1,789.46 +10.80%
INTC $109.05 +0.11%
SPCX $152.43 -1.73%
MU $1,015.26 +3.60%
AMD $557.74 +2.31%

rac

All
Article
Flash

first_img Fake AI trading robot tutorial deceives 224 victims into deploying malicious contracts

On September 14, blockchain intelligence company TRM Labs released a report revealing that fake YouTube tutorials lured 224 victims into deploying and funding malicious smart contracts under the guise of building AI-based crypto arbitrage bots, resulting in the theft of 274.6 ETH. TRM identified a total of 234 contracts deployed by the victims, with funds ultimately flowing into six collection addresses controlled by the operators. The stolen ETH was worth approximately $517,000 at the time of the transfer, with a median loss of 1 ETH per incident.Unlike common wallet theft attacks, this scam did not involve phishing links, spoofed domains, or malicious authorization prompts. Victims chose the tutorials themselves, copied the code, deployed the contracts, and funded them from their own wallets, with each step authorized by the victims themselves. As a result, wallet security warnings and phishing blacklists could not be triggered. TRM discovered nine nearly identical YouTube tutorials disguised as different creators, using AI-generated virtual hosts and voiceovers, promising to build fully automated crypto trading bots with Claude, and guiding victims to a compiler website controlled by the operators, some of which mimicked the commonly used Remix development environment.In one variant analyzed by TRM, a backend script would discard the source code pasted by the victims and retrieve another contract from the operator's server, with the clean code displayed on the screen never being on-chain. The replaced contract accepted deposits and transferred any balance over 0.05 ETH to the operators when the victims pressed Start or Withdraw, with no arbitrage logic or AI functionality included in the contract.
app_icon
ChainCatcher Building the Web3 world with innovations.