etherscan / ethvalidate

https://etherscan.github.io/ethvalidate/
MIT License
473 stars 193 forks source link

Indexing ERC20 'Ghost' transfers - 0 Stablecoin transfers - Possible Hack? #91

Closed jonsats closed 1 year ago

jonsats commented 1 year ago

Noticing for stablecoin transfers there appears to be 'ghost' transactions of 0 USDC/USDT using a fee, but not found in the main transaction tab:

How To Recreate:

  1. Send X amount of USDC or USDT (ERC20)
  2. 'Ghost' transaction of 0 USDC/USDT transfer appears to a very similar but different address
  3. 'Ghost' transaction does not appear in main transaction tab, only the ERC20 view

This could potentially be a malicious attempt at getting people to send ERC20s to what they think is the correct address but could be the hackers!