Warning: ZKasino - Possible wallet phishing scam

[Daltonik]

Using a browser extension wallet that is useless as the user suggested should be a perfectly fine way to test websites that require wallet connection. Usually the full extent that a malicious wallet connect website can go, is accessing all of your addresses and doing as much damage as that permission can damage. As far as I am aware, there is no such malware that can be injected into your browser or desktop via wallet connection.

Yes, of course it is, but here we are talking about the fact that the original sai online casino ZKasino does not have such a feature as a pop-up window with an offer to connect a wallet, and it was not possible to remove it unless you close the site window. And therefore the OP provided a link to a modified online casino site where I suspect you would simply lose your funds just by betting.

[1715513153]

1715513153

[1715513153]

1715513153

[1715513153]

1715513153

[1715513153]

1715513153

[1715513153]

1715513153

[BenCodie]

Using a browser extension wallet that is useless as the user suggested should be a perfectly fine way to test websites that require wallet connection. Usually the full extent that a malicious wallet connect website can go, is accessing all of your addresses and doing as much damage as that permission can damage. As far as I am aware, there is no such malware that can be injected into your browser or desktop via wallet connection.

Yes, of course it is, but here we are talking about the fact that the original sai online casino ZKasino does not have such a feature as a pop-up window with an offer to connect a wallet, and it was not possible to remove it unless you close the site window. And therefore the OP provided a link to a modified online casino site where I suspect you would simply lose your funds just by betting.

I doubt that you would even be able to bet to begin with. I am assuming after you connect, your wallet would be cleaned.

As far as I am aware, there is no such malware that can be injected into your browser or desktop via wallet connection.

Maybe, maybe not. I don't want to be the lab rat to test it.

I don't think it is a matter of "maybe, maybe not", it is either possible or impossible. Wallet connection asks to grant permissions to communicate between your wallet. Your wallet is not capable of downloading software to your device. Neither is a smart contract. Therefore, it is impossible to spread malware by connecting your wallet (whether it is malicious connection or legitimate).

[klidex]

Using a browser extension wallet that is useless as the user suggested should be a perfectly fine way to test websites that require wallet connection. Usually the full extent that a malicious wallet connect website can go, is accessing all of your addresses and doing as much damage as that permission can damage. As far as I am aware, there is no such malware that can be injected into your browser or desktop via wallet connection.

Yes, of course it is, but here we are talking about the fact that the original sai online casino ZKasino does not have such a feature as a pop-up window with an offer to connect a wallet, and it was not possible to remove it unless you close the site window. And therefore the OP provided a link to a modified online casino site where I suspect you would simply lose your funds just by betting.

By connecting the casino with the wallet that we have, we are giving the opportunity for us to lose everything we already have in the wallet because connecting the wallet has a very big risk.
I am not too sure that this casino site can guarantee the security of the funds that we keep in our wallets and in fact I have the same suspicions as you.
I suggest to every gambler to be extra careful when it comes to connecting their wallet to a casino just to be able to bet there.

[Daltonik]

Using a browser extension wallet that is useless as the user suggested should be a perfectly fine way to test websites that require wallet connection. Usually the full extent that a malicious wallet connect website can go, is accessing all of your addresses and doing as much damage as that permission can damage. As far as I am aware, there is no such malware that can be injected into your browser or desktop via wallet connection.

Yes, of course it is, but here we are talking about the fact that the original sai online casino ZKasino does not have such a feature as a pop-up window with an offer to connect a wallet, and it was not possible to remove it unless you close the site window. And therefore the OP provided a link to a modified online casino site where I suspect you would simply lose your funds just by betting.

By connecting the casino with the wallet that we have, we are giving the opportunity for us to lose everything we already have in the wallet because connecting the wallet has a very big risk.
I am not too sure that this casino site can guarantee the security of the funds that we keep in our wallets and in fact I have the same suspicions as you.
I suggest to every gambler to be extra careful when it comes to connecting their wallet to a casino just to be able to bet there.

Well, here you always need to pay attention to exactly how the website interacts with your wallet, usually these are two things that the wallet does after connecting:
1. allows the website to know that you have a crypto wallet
2.provides the website with the public address of your wallet.
But "Approval" approves an address to spend X amount of your tokens and this requires a real transaction, but in this case you must explicitly agree to its execution. However, in any case, it is better not to connect your wallet to suspicious sites.

[TheGreatPython]

By connecting the casino with the wallet that we have, we are giving the opportunity for us to lose everything we already have in the wallet because connecting the wallet has a very big risk.
I am not too sure that this casino site can guarantee the security of the funds that we keep in our wallets and in fact I have the same suspicions as you.
I suggest to every gambler to be extra careful when it comes to connecting their wallet to a casino just to be able to bet there.

Well, that is not entirely true. By just connecting your wallet with a website, you don't specifically give them access to your wallet or the funds stored in it, unless you give them the access. Your wallet should ask you to approve if a website/service tries to make a transaction using your wallet balance.

As long as you read every detail provided by your wallet when approving or accepting a connection to your wallet, you should be good, although it is still not the best practice to connect your wallet everywhere except for the places that you actually trust.

[worldofcoins]

Warning about ZK:NO KYC Instant withdraws up to $500K/24h.Today only: 0% edge and ZKAS airdrop

Every element of the website (including the social media viewing) requires you to connect your wallet. Additionally, the topic is locked for discussion though the creator (newbie) is posting to bump the thread. This is extremely suspicious.

This thread can be removed after a moderator reviews the report. This is a warning not to connect your wallet to this website until there is more information as to why the discussion is locked and why the website forces walletconnect for even things like viewing social media/joining discord.

Hi, welcome to the forum. Thank you for sharing this piece of valuable information with us.
Your concerns are significant, as they can be a possible scam threat.
I would suggest everyone stay vigilant until more details about why the discussion is locked and why wallet connects are required for every aspect of the website.

[CryptSafe]

I noticed same thing too then and I became skeptical of such actions because when such a thing happens, there is likely something fishy about that thing which made the OP locked it not to talk of when there are complaints coming in from different angles about that thread. Normally, anything that has to do with linking up of wallet, I am very much mindful of it as it involves granting access to your wallet which in other words, means permitting access to the third party to make withdrawal as the case maybe.
If you must grant any third party access to your wallet via website connection, you must be sure of that website so as not to get your funds stollen or you use a new wallet entirely different.

[Solosanz]

Hi, welcome to the forum. Thank you for sharing this piece of valuable information with us.
Your concerns are significant, as they can be a possible scam threat.
I would suggest everyone stay vigilant until more details about why the discussion is locked and why wallet connects are required for every aspect of the website.

The @OP was been this forum since 2014 and you say welcome to the forum? I have no idea why you can say this

There are few casinos claimed they were web 3.0 casinos and they ask to connect your wallet if you want to play in their site, although there's no case where they scam, but make sure anyone need to use secondary wallet and not use their primary wallet.

I still think creating an account and make a deposit is much safer than this one.

[piebeyb]

There are few casinos claimed they were web 3.0 casinos and they ask to connect your wallet if you want to play in their site, although there's no case where they scam, but make sure anyone need to use secondary wallet and not use their primary wallet.

I still think creating an account and make a deposit is much safer than this one.

I often do this to avoid problems and also this should be done by many other users if you want to connect a wallet on a site that supports web 3.0 use a secondary wallet don't use the main wallet which has all our crypto assets, because we will never know the malicious intentions of the site owner so avoid connecting to the main wallet and always make sure to use a new wallet especially on sites that are currently in testing.

[tusandii]

There are few casinos claimed they were web 3.0 casinos and they ask to connect your wallet if you want to play in their site, although there's no case where they scam, but make sure anyone need to use secondary wallet and not use their primary wallet.

I still think creating an account and make a deposit is much safer than this one.

In using the web3 casino, all gamblers really have to connect their personal wallets to be able to play or bet, but we can anticipate that bad things will not happen to the assets in our wallets by creating a new wallet and only using it to play at the casino, so there is no need to worry about bad things.
After all, several web3 casinos are also trusted and have quite a good reputation so not all web3 casinos have the danger of scams, but we still have to be careful and protect the assets we have.
If you say security, it is indeed safer to create an account and make a deposit every time you play, but web3 casinos make it easy for gamblers not to need to make a deposit and only need to combine wallets to play or bet.

[dezoel]

There are few casinos claimed they were web 3.0 casinos and they ask to connect your wallet if you want to play in their site, although there's no case where they scam, but make sure anyone need to use secondary wallet and not use their primary wallet.

I still think creating an account and make a deposit is much safer than this one.

In using the web3 casino, all gamblers really have to connect their personal wallets to be able to play or bet, but we can anticipate that bad things will not happen to the assets in our wallets by creating a new wallet and only using it to play at the casino, so there is no need to worry about bad things.
After all, several web3 casinos are also trusted and have quite a good reputation so not all web3 casinos have the danger of scams, but we still have to be careful and protect the assets we have.
If you say security, it is indeed safer to create an account and make a deposit every time you play, but web3 casinos make it easy for gamblers not to need to make a deposit and only need to combine wallets to play or bet.

Why would you say that several web3 casinos are trusted while there aren't really a lot of them available yet? I don't remember seeing any more than one casino that claims to be utilizing web3 and that had the option for the gamblers to connect their wallet and place bets directly through the wallet using smart contracts and on-chain transactions.

Security will definitely be a concern for everyone since there aren't a lot of platforms with this feature and if there are any that would be new with no trust and reputation. So it's obviously risky but there nothing wrong in checking them out with a new wallet.

[Fivestar4everMVP]

There are few casinos claimed they were web 3.0 casinos and they ask to connect your wallet if you want to play in their site, although there's no case where they scam, but make sure anyone need to use secondary wallet and not use their primary wallet.

I still think creating an account and make a deposit is much safer than this one.

In using the web3 casino, all gamblers really have to connect their personal wallets to be able to play or bet, but we can anticipate that bad things will not happen to the assets in our wallets by creating a new wallet and only using it to play at the casino, so there is no need to worry about bad things.
After all, several web3 casinos are also trusted and have quite a good reputation so not all web3 casinos have the danger of scams, but we still have to be careful and protect the assets we have.
If you say security, it is indeed safer to create an account and make a deposit every time you play, but web3 casinos make it easy for gamblers not to need to make a deposit and only need to combine wallets to play or bet.

Why would you say that several web3 casinos are trusted while there aren't really a lot of them available yet? I don't remember seeing any more than one casino that claims to be utilizing web3 and that had the option for the gamblers to connect their wallet and place bets directly through the wallet using smart contracts and on-chain transactions.

Security will definitely be a concern for everyone since there aren't a lot of platforms with this feature and if there are any that would be new with no trust and reputation. So it's obviously risky but there nothing wrong in checking them out with a new wallet.

I think I have also seen only one, or maybe two web3 casinos, but I've never tried any and don't even intend to.

The truth is that, gambling casinos can never be like exchanges, where some traders prefer decentralized exchanges over centralized ones, possibly due to frequent hacks and all that, in gambling, centralized Casino rarely get hacked, so I see no motivation to want to use a decentralized, in other words, web3 casino for my gambling activities.

[Outhue]

Damn, the fact that this project is using the Zksync role name anyone can easily trust this defi casino, it will be hard for me to leave the likes of Fortune Jack and Roobet for any blockchain gambling platform, they have nothing to lose and reputation is the last thing on their mind, I don't know if anyone knew about Riddoto? It's a new blockchain gambling platform too, good for alt-season investment in the coming bull market but I doubt it's survival later on, I think it's safer to stay with popular online casinos instead of blockchain gambling platforms.

[tusandii]

-snip-

-snip-

Why would you say that several web3 casinos are trusted while there aren't really a lot of them available yet? I don't remember seeing any more than one casino that claims to be utilizing web3 and that had the option for the gamblers to connect their wallet and place bets directly through the wallet using smart contracts and on-chain transactions.

Security will definitely be a concern for everyone since there aren't a lot of platforms with this feature and if there are any that would be new with no trust and reputation. So it's obviously risky but there nothing wrong in checking them out with a new wallet.

Because I also use a web3-based casino and have no problems playing there even though I rarely play but it's enough to give a sense of trust to their site and indeed I have to use my personal wallet to be able to play.
Maybe you can search and try one of the web3 casinos to prove firsthand that there are pretty good web3 sites.
Every casino will guarantee the safety of every gambler who plays there and not only at Web3 Casino but also other casinos will implement the same thing.
If you really want to be safer, just use a new or secondary wallet so you don't have to worry that when you try it there will be problems.

[len01]

In using the web3 casino, all gamblers really have to connect their personal wallets to be able to play or bet, but we can anticipate that bad things will not happen to the assets in our wallets by creating a new wallet and only using it to play at the casino, so there is no need to worry about bad things.
After all, several web3 casinos are also trusted and have quite a good reputation so not all web3 casinos have the danger of scams, but we still have to be careful and protect the assets we have.
If you say security, it is indeed safer to create an account and make a deposit every time you play, but web3 casinos make it easy for gamblers not to need to make a deposit and only need to combine wallets to play or bet.

can you share your experience in web3 casino? I mean what is the name of the web3 casino you mean can you share the name of the casino here?
because to be honest I have never had any experience in a web3 casino even though I know some web3 casinos but they don't have any trust or reputation and in my opinion there is no guarantee of the risk of fraud if you understand.

[tusandii]

-snip-

can you share your experience in web3 casino? I mean what is the name of the web3 casino you mean can you share the name of the casino here?
because to be honest I have never had any experience in a web3 casino even though I know some web3 casinos but they don't have any trust or reputation and in my opinion there is no guarantee of the risk of fraud if you understand.

Sorry, friend, for the problem of sharing the name of the web3 casino, I can't say it and I'm sure you understand and can understand, from my point of view, why can't you say it.
It is true that there are no web3 casinos that provide guarantees and conveyances saying that they guarantee the safety of their users but I myself am sure that every casino will take care of security for the sake of their good name.
Maybe you can try yourself playing at one of the web3 casinos that you know because if you only rely on the experiences of other gamblers you are unlikely to get a good experience and have real proof that web3 casinos are not all bad.

[klidex]

Damn, the fact that this project is using the Zksync role name anyone can easily trust this defi casino, it will be hard for me to leave the likes of Fortune Jack and Roobet for any blockchain gambling platform, they have nothing to lose and reputation is the last thing on their mind, I don't know if anyone knew about Riddoto? It's a new blockchain gambling platform too, good for alt-season investment in the coming bull market but I doubt it's survival later on, I think it's safer to stay with popular online casinos instead of blockchain gambling platforms.

Someone who has expertise in advanced technology can easily clone other gambling sites and be used to deceive many people.
This is the importance of us always choosing to gamble at popular casinos on this forum and choosing this forum as a place to look for trusted casinos.
On the other good things in this forum there are many experienced gamblers who can find scam sites and share them here so that we are more careful not to deposit our money on these sites.
Incidents of cloning gambling sites like this have happened a long time ago and if we are observant in choosing a new casino, we can definitely detect that the site is a scam.

[Hispo]

Correct me if I am wrong but, in case someone decided to access a scam DEfi casino using Metamask connected to a hardware wallet like Trezor or Ledger.
The website would not be able to steal the funds, would they?

Because in theory, any operation/signature would need to be approved from the physical device itself and then it would be obvious we are being asked to send funds to a different address. Unless, they make it appear to be an interaction with a smart contract so the victim may approve it?

I makes me wonder what they do in order to steal from a metamask-only wallet? Do they use a malware to steal the seed or trick the user to perform a transaction with a false message?

[jostorres]

I think I have also seen only one, or maybe two web3 casinos, but I've never tried any and don't even intend to.

The truth is that, gambling casinos can never be like exchanges, where some traders prefer decentralized exchanges over centralized ones, possibly due to frequent hacks and all that, in gambling, centralized Casino rarely get hacked, so I see no motivation to want to use a decentralized, in other words, web3 casino for my gambling activities.

Just like you, most of the gamblers don't have issues using centralized casinos mainly because they are licensed and trusted and probably also because they have been around for longer and has a reputation built up already in the community. So it doesn't sound so good to leave a casino that you have been using which is trusted and start using one that isn't.

Decentralized casinos might get popular later in the future when there are more regulations and rules imposed by the laws on centralized exchanges, but I doubt that they will not do the same with decentralized ones.

[DoublerHunter]

Correct me if I am wrong but, in case someone decided to access a scam DEfi casino using Metamask connected to a hardware wallet like Trezor or Ledger.
The website would not be able to steal the funds, would they?

Because in theory, any operation/signature would need to be approved from the physical device itself and then it would be obvious we are being asked to send funds to a different address. Unless, they make it appear to be an interaction with a smart contract so the victim may approve it?

I makes me wonder what they do in order to steal from a metamask-only wallet? Do they use a malware to steal the seed or trick the user to perform a transaction with a false message?

^ I don't know how it will work either but as far as I know, these attackers can possibly steal your fund through to have display a fake login screen or prompt the user to enter their seed phrase, which is then stolen by the attacker. Another tactic is to intercept transactions and replace the intended recipient's address with the attacker's address, resulting in the loss of the user's funds.
All kinds of wallets are not safe once your device gets infected with the virus, so we should be thankful of what OP shared here because if I were on that side, I did not also connect my wallet.