search

MyEtherWallet / ethereum-lists

A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.
MIT License
633 stars 1.33k forks source link

This scam project is kind a new style. #1970

Open UnoRich opened 2 years ago

UnoRich commented 2 years ago

https://dex-cex.org/ https://dex-cex.biz/

one of scam address 0x8ee92109e2D327710a25Ca20D05Da680a3b2eDDB

they saying that they are using DEX and CEX arbitrage. and from the 1000USDT user can get 1.2~1.7% a day. at the beginning of using their services, users approve unlimited spend allowance to scam addresses.

It is really hard to figure this is a scam or not is that they actually give profit to users. but in the end, they take all money from the user's USDT wallet. cause they approve already.

even if someone started this service with 1000USDT they see that they actually earn more than 1% a day. they started depositing more and more money, and at some point, the scammer transferred all the money.

https://etherscan.io/token/0xdac17f958d2ee523a2206206994597c13d831ec7?a=0xa38bab1147f26ca2dd1456b4984a5b0d1abfd184

this is one of the victims of this service. this guy started this service about 40days ago (approve unlimited spend https://etherscan.io/tx/0x0369d959d995d5bce29579a53c8dbfb798ba89f7988caaa88084e2c8d91edcb9)

he started 1,075 USDT first and withdraw profits every 4~7days. and it became 1,471 USDT within 30days. finally, 2 days ago scammer transfer all the money from the user's wallet.

this is a really serious problem with Unlimited ERC20 allowances.

another scam address used on this site 0x90a3C256cBC46175150356E92dF0A2Bd25725DC1 this address also gets approved unlimited spending and takes all from several users.

https://etherscan.io/address/0x90a3C256cBC46175150356E92dF0A2Bd25725DC1

how can we prevent this kind of scam?

OverJar commented 1 year ago

Check their code before you are invest