Million-Dollar Crypto Scam that Leaves Investors Empty-handed

In the fast-paced world of cryptocurrency, the ever-looming threat of Rug Pulls has once again taken center stage. 

Check Point’s Threat Intel Blockchain system, a vigilant guardian of the blockchain realm, recently uncovered a meticulously executed scheme that swindled nearly $1 million from unsuspecting investors. 

The Threat Intel Blockchain system sounded the alarm on an ongoing Rug Pull event, exposing the malevolent actor orchestrating this financial caper.

Exploiting the fervor surrounding cryptocurrency, the perpetrator deftly lured in victims, capitalizing on the allure of the latest trends and creating tokens such as GROK 2.0.

This sophisticated scam unfolded in multiple stages, from the creation of fake tokens to the manipulation of liquidity pools, simulated trading activities, and the eventual extraction of funds.

Scan Flow
Document
Free Webinar

Live API Attack Simulation Webinar

In the upcoming webinar, Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface demonstrate how APIs could be hacked. The session will cover: an exploit of OWASP API Top 10 vulnerability, a brute force account take-over (ATO) attack on API, a DDoS attack on an API, how a WAAP could bolster security over an API gateway

  1. Fabricating Deceptive Tokens: To ensnare unsuspecting investors, deceptive tokens like GROK 2.0 were meticulously crafted to resemble trending topics, effectively cloaking their fraudulent nature closely.
  1. Injecting Funds into the Liquidity Pool: To establish an illusion of legitimacy and activity, funds were injected into the token pool, creating a smokescreen of a thriving and vibrant token.
  1. Fictitious Trades: To further entice investors and perpetuate the illusion of genuine trading activity, the scammer meticulously executed simulated trades, creating the semblance of a dynamic market.
  2. Artificially Inflating Token Value: Through a series of large-scale trades, the scammer artificially inflated the token’s value, duping investors into believing in its perceived high demand and worth.
  3. Enticing Unsuspecting Investors: Capitalizing on the fabricated attractiveness of the token, unsuspecting users were drawn into the scam, unknowingly investing their funds.
  4. Draining Liquidity: Once a substantial number of investors were hooked, the scammer initiated the final phase of the scheme, withdrawing liquidity from the token pool and leaving victims with worthless assets.

Delving into the technicalities, the scammer utilized two smart contracts to trade and pump the token volume, executing functions like simulated trading and artificially boosting token volume through Uniswap Router.

This Rug Pull incident is a stark reminder of the importance of awareness and due diligence. 

Check Point researchers, committed to safeguarding the crypto community, actively monitor domains associated with the identified scammer’s wallet address and similar threats.

Stay informed, stay vigilant.

Experience how StorageGuard eliminates the security blind spots in your storage systems by trying a 14-day free trial.

Eswar

Eswar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Recent Posts

Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting victims…

11 hours ago

Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ advanced…

11 hours ago

XSS Vulnerability in Bing.com Let Attackers Send Crafted Malicious Requests

A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to execute…

14 hours ago

Meta Removed 2 Million Account Linked to Malicious Activities

 Meta has announced the removal of over 2 million accounts connected to malicious activities, including…

17 hours ago

Veritas Enterprise Vault Vulnerabilities Lets Attackers Execute Arbitrary Code Remotely

Critical security vulnerability has been identified in Veritas Enterprise Vault, a widely-used archiving and content…

18 hours ago

7-Zip RCE Vulnerability Let Attackers Execute Remote Code

A critical security vulnerability has been disclosed in the popular file archiving tool 7-Zip, allowing…

19 hours ago