Million-Dollar Crypto Scam that Leaves Investors Empty-handed

In the fast-paced world of cryptocurrency, the ever-looming threat of Rug Pulls has once again taken center stage. 

Check Point’s Threat Intel Blockchain system, a vigilant guardian of the blockchain realm, recently uncovered a meticulously executed scheme that swindled nearly $1 million from unsuspecting investors. 

The Threat Intel Blockchain system sounded the alarm on an ongoing Rug Pull event, exposing the malevolent actor orchestrating this financial caper.

Exploiting the fervor surrounding cryptocurrency, the perpetrator deftly lured in victims, capitalizing on the allure of the latest trends and creating tokens such as GROK 2.0.

This sophisticated scam unfolded in multiple stages, from the creation of fake tokens to the manipulation of liquidity pools, simulated trading activities, and the eventual extraction of funds.

Scan Flow
Document
Free Webinar

Live API Attack Simulation Webinar

In the upcoming webinar, Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface demonstrate how APIs could be hacked. The session will cover: an exploit of OWASP API Top 10 vulnerability, a brute force account take-over (ATO) attack on API, a DDoS attack on an API, how a WAAP could bolster security over an API gateway

  1. Fabricating Deceptive Tokens: To ensnare unsuspecting investors, deceptive tokens like GROK 2.0 were meticulously crafted to resemble trending topics, effectively cloaking their fraudulent nature closely.
  1. Injecting Funds into the Liquidity Pool: To establish an illusion of legitimacy and activity, funds were injected into the token pool, creating a smokescreen of a thriving and vibrant token.
  1. Fictitious Trades: To further entice investors and perpetuate the illusion of genuine trading activity, the scammer meticulously executed simulated trades, creating the semblance of a dynamic market.
  2. Artificially Inflating Token Value: Through a series of large-scale trades, the scammer artificially inflated the token’s value, duping investors into believing in its perceived high demand and worth.
  3. Enticing Unsuspecting Investors: Capitalizing on the fabricated attractiveness of the token, unsuspecting users were drawn into the scam, unknowingly investing their funds.
  4. Draining Liquidity: Once a substantial number of investors were hooked, the scammer initiated the final phase of the scheme, withdrawing liquidity from the token pool and leaving victims with worthless assets.

Delving into the technicalities, the scammer utilized two smart contracts to trade and pump the token volume, executing functions like simulated trading and artificially boosting token volume through Uniswap Router.

This Rug Pull incident is a stark reminder of the importance of awareness and due diligence. 

Check Point researchers, committed to safeguarding the crypto community, actively monitor domains associated with the identified scammer’s wallet address and similar threats.

Stay informed, stay vigilant.

Experience how StorageGuard eliminates the security blind spots in your storage systems by trying a 14-day free trial.

Eswar

Eswar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Recent Posts

Chinese Hackers Breach Belgium State Security Service as Investigation Continues

Belgium’s State Security Service (VSSE) has suffered what is being described as its most severe…

6 hours ago

Hacktivist Groups Emerge With Powerful Tools for Large-Scale Cyber Operations

Hacktivism, once synonymous with symbolic website defacements and distributed denial-of-service (DDoS) attacks, has evolved into…

6 hours ago

New Pass-the-Cookie Attacks Bypass MFA, Giving Hackers Full Account Access

Multi-factor authentication (MFA), long considered a cornerstone of cybersecurity defense, is facing a formidable new…

11 hours ago

Chinese Hackers Exploit Check Point VPN Zero-Day to Target Organizations Globally

A sophisticated cyberespionage campaign linked to Chinese state-sponsored actors has exploited a previously patched Check…

13 hours ago

PingAM Java Agent Vulnerability Allows Attackers to Bypass Security

A critical security flaw (CVE-2025-20059) has been identified in supported versions of Ping Identity’s PingAM…

13 hours ago

New GitHub Scam Uses Fake “Mods” and “Cracks” to Steal User Data

A sophisticated malware campaign leveraging GitHub repositories disguised as game modifications and cracked software has…

15 hours ago