Careful if you using Solflare Solana wallet

[BabyBandit]

If you using or think of start using Solflare-wallet be aware of this.
When you open Solflare wallet you will see the page open, up you get the menu and it look like this.


And under Portfolio you will see your tokens and your balance, but under "Collectibles" you will often get things that look like a air-drop and other things that may be tempering to look into, but is nothing else then scams.
They will want you to go into a website they have in the picture or somewhere else and if you will go to that website they will ask you for connect wallet to get your airdrop but if you connect we all know what will happen you will get an empty wallet. The good thing here is that you can mark it as spam and then it will disappear, I get many of this every week almost every day and think it would be wise to warn users here if someone maybe don't know about it and thinking about using Solflare or already using it, and this is probably same on the most wallets so it's hard to avoid.



And then when you mouse click on it it will look like this:


But up in he corner where it says send its two dots

And there you marke it as spam and it disappear.


This is probably obvious for some of the users here, but guarantee not for everyone so it don't cost anything to share the warning.

Be safe out there.

[Despairo]

In addition if someone mistakenly clicked to download, accept or connect to Web3 site or unknown token, you need to use revoke.cash to remove the access or wiped the token.

If you feel disturbed for receiving those scams notification, maybe it's a targeted attack and it could be your privacy is compromised. You can open a new wallet and don't link with your compromised address.

[FinneysTrueVision]

Anytime an address receives funds there are scammers who will automatically send them NFTs to try and lure them to a phishing site where they will be asked to connect their wallet to a malicious smart contract. If you approve the transactions to supposedly claim your airdrop you are actually giving them permission to drain your wallet.

A few weeks ago I created a wallet to do several Polygon transactions and immediately my wallet started receiving these scam NFTs. Some of them are on blockchains I've never used but they have the same address type and have cheap fees so it is easy and inexpensive for people to run these schemes.

[hugeblack]

Such scam may occur in all wallets, and I wish there was a dedicated filter to avoid this spam so that it hides any unwanted NFTs, but this type of fraud has begun to spread, and you can try the link yourself with an empty wallet and a small fee for gas if you want to be sure, but in general ignore any unknown codes that are sent to you.

[MTARN]

JE6Csox12XVCzqDz2kt2PCR8qnfiXcwTHSt2SvJ1Jkri

This is the address stolen my total crypto from Solflare, same as you mentioned in the subjected post. Can we report this address and can get back my assets?


JE6Csox12XVCzqDz2kt2PCR8qnfiXcwTHSt2SvJ1Jkri

This is the address my crypto transfered, the Solflare wallet collectibles air drop link and its all infront of me and my total wallet got emptied. & 44 - 50 I lost that was my hard money, how can I get back that my assets, i search online and on solona site total transaction history showing clearly the assets transfered from my wallet to the above address and the crypto are still in that scammer wallet and the same figure and amount of crypto showing but i vat do anything, can't report can't block his address , please help me out to get my crypto back. This is my adress

Ay3taiGzGPprUH6dW7of1CGyDpBFnvZttB8yEtdXN5aR
Help me

[hugeblack]

JE6Csox12XVCzqDz2kt2PCR8qnfiXcwTHSt2SvJ1Jkri

This is the address stolen my total crypto from Solflare, same as you mentioned in the subjected post. Can we report this address and can get back my assets?

You can report the address as a scam to metamask^[1] and etherscan^[2], and then a warning will be given to whoever wants to send to that address, but to get your money back you need to inform the local police and your country must be crypto friendly.


[1] https://support.metamask.io/hc/en-us/articles/5168786362779-How-to-report-a-scam
[2] https://info.etherscan.com/report-address/#:~:text=Search%20for%20the%20address%20of,Address%20from%20the%20dropdown%20menu.

[MTARN]

Thank you,
Etherscan is easy for reporting and also reporting on metamaak.

[logfiles]

JE6Csox12XVCzqDz2kt2PCR8qnfiXcwTHSt2SvJ1Jkri

This is the address stolen my total crypto from Solflare, same as you mentioned in the subjected post. Can we report this address and can get back my assets?

Unfortunately, you can not get your funds back. But the best thing to do is to report how you were scammed so that this can prevent other future users from falling for the similar kind of scam

I looked into the address on Solscan, and it looks like the scammer is ripping big from his scam tactic. Absolutely sad.

[MTARN]

JE6Csox12XVCzqDz2kt2PCR8qnfiXcwTHSt2SvJ1Jkri

This is the address stolen my total crypto from Solflare, same as you mentioned in the subjected post. Can we report this address and can get back my assets?

Unfortunately, you can not get your funds back. But the best thing to do is to report how you were scammed so that this can prevent other future users from falling for the similar kind of scam

I looked into the address on Solscan, and it looks like the scammer is ripping big from his scam tactic. Absolutely sad.

Yes, many crypto's are into his account, and my assests are also there apewifhat, win and solona :sad:

[BitcoinGirl.Club]

Such scam may occur in all wallets, and I wish there was a dedicated filter to avoid this spam so that it hides any unwanted NFTs, but this type of fraud has begun to spread, and you can try the link yourself with an empty wallet and a small fee for gas if you want to be sure, but in general ignore any unknown codes that are sent to you.

If the wallet is connected with a hardware wallet then I think there are no risk as the browser can not read the seed.

[owlcatz]

If the wallet is connected with a hardware wallet then I think there are no risk as the browser can not read the seed.

This would be for BTC since it's doing a broadcast, but other chains (I should say "Dapps"(?) that allow you to connect and approve types of access to your account and even a hardware wallet won't solve that if you actually connect and approve the access.

[Zaguru12]

One thing I will say is I am not quite surprise because one way or the other something like this will come up, Solana ecosystem is the most popular memecoins ecosystem at the moment surpassing the Ethereum blockchain or ecosystem due to high fess. I knew that scammers will seize this opportunity to rip people off.

I wouldn’t advise anyone against not buying Solana and it’s memes since it’s a personal decision. But going further if the problem of Solflare wallet persists then you can move to phantom wallet which is also a good wallet for Solana tokens and coins. But one thing still remains you must have to connect your wallet to this DEX before you can do swap. My advice is have a second wallet which actually stores your coins and another to be used to connect to DEX. Once you buy tokens with this wallet you can simply transfer it to the other one. Long process but it’s better than connecting your main wallet to DEx. Another reminder make sure to disconnect your wallet from those dex after any transaction

[pinggoki]

I saw that in my wallet too, but it seems that Solana has done the work in hiding the suspicious tokens that was airdropped to my account, it's not a big deal to me though as I don't often check my Solana wallet anyway and I can always just ask my friend if they know about this kind of stuff, they're only able to steal your tokens and other stuff in your wallet when you unknowingly tap and follow what they want you to do in that wallet right? Nonetheless, it's a good PSA to have because you can never be too careful especially with all these scammers out there that don't want to play fair, they're going to abusing those times that you make mistakes so you better not be doing any of those mistakes or you'd risk being a sucker and getting your bitcoin stolen.

Is there like a way to report that the token that's airdropped to your account a scam token? I think that reporting them and getting some kind reputation on the token helps a lot to know that they're a legitimate one, that kind of system could work in my opinion.

[logfiles]

I wouldn’t advise anyone against not buying Solana and it’s memes since it’s a personal decision. But going further if the problem of Solflare wallet persists then you can move to phantom wallet which is also a good wallet for Solana tokens and coins.

I also use Solflare wallet sometimes and never had any problems or loss of assets. The problem is not the wallet, but people who just connect their wallets to any site they come across, just because they have received worthless airdropped NFTs in their addresses.

Is there like a way to report that the token that's airdropped to your account a scam token? I think that reporting them and getting some kind reputation on the token helps a lot to know that they're a legitimate one, that kind of system could work in my opinion.

In the OP, there is a description on how to report the useless tokens as spam so that they disappear from the wallet.

[BitcoinGirl.Club]

This would be for BTC since it's doing a broadcast, but other chains (I should say "Dapps"(?) that allow you to connect and approve types of access to your account and even a hardware wallet won't solve that if you actually connect and approve the access.

I always thought browser can not read the seed of the hardware wallet because it's offline. So you are saying there is always risk with those WEB3 wallets?

[Maus0728]

I don't see this in my wallet, haven't experienced any kind of airdrop from scam tokens before and I did check it but there's really nothing there, maybe because it's something that's targeted specifically against new accounts or something like that, really crazy to think about it that scammers can now directly influence how you'll react to their scams by doing this kind of airdrops, makes you look in awe that they're able to do this kind of thing. Doesn't Solana have a way to protect you by automatically hiding suspicious tokens? If I recall, I think they do have that and you can check them out too.

[logfiles]

I don't see this in my wallet, haven't experienced any kind of airdrop from scam tokens before and I did check it but there's really nothing there, maybe because it's something that's targeted specifically against new accounts or something like that, really crazy to think about it that scammers can now directly influence how you'll react to their scams by doing this kind of airdrops, makes you look in awe that they're able to do this kind of thing. Doesn't Solana have a way to protect you by automatically hiding suspicious tokens? If I recall, I think they do have that and you can check them out too.

I think it depends on how active your wallet/address is?
If you often trade those shitcoins on Solana, then you are likely to receive those useless airdropped NFTs

For example, I just executed a trade via raydium swap some 30 minutes ago and the address has already received 4 scam NFTs 



Just check the activity or collectibles tab (one with 4 small squares)

[owlcatz]

I always thought browser can not read the seed of the hardware wallet because it's offline. So you are saying there is always risk with those WEB3 wallets?

Well it's more about what token approvals you accept/grant to your wallet, and what authorizations you may give to a site via a contract.

For example, https://revoke.cash/ will let you check your ETH wallet (hardware or not) and you can remove authorizations.

Also, here's a good post about it on reddit - https://www.reddit.com/r/CryptoCurrency/comments/11u9jf4/your_hardware_wallet_can_be_drained_even_if_you/

[albon]

This is probably obvious for some of the users here, but guarantee not for everyone so it don't cost anything to share the warning.

Thank you for sharing this warning. The Solana network and its tokens have gained big hype this year. A beginner might make a mistake, and the scammers might drain his wallet if he is unaware of this deceitful method called the NFT scam, in which scammers use a bot to send scam NFTs to the addresses of recent transactions.

It is worth noting that this type of scam can occur on any wallet a person uses. I previously read about an incident where a victim using the Phantom wallet received these scam NFTs, connected his wallet to the phishing link he directed, and made an approval request. After that, he lost all his assets, which were estimated to be thousands of dollars. Therefore, anyone who receives these NFTs should completely ignore them; if he does not know where they came from, he should not trust them before doing his research. A feature in the Phantom wallet after clicking on the settings is "Disconnecting App Permissions," which is useful if permissions were given by mistake.

[tsaroz]

Such scam may occur in all wallets, and I wish there was a dedicated filter to avoid this spam so that it hides any unwanted NFTs, but this type of fraud has begun to spread, and you can try the link yourself with an empty wallet and a small fee for gas if you want to be sure, but in general ignore any unknown codes that are sent to you.

I don't know if it's ad or some promotions but I haven't seen them anywhere in my solflare wallet. They might be IP specific or something but all my Collectibles tab has is a NFT that I bought. There are no any other things. I checked the three buttons to toggle show spam and hide spam but they don't show or hide anything.
It could be because I'm using Adblock origin and some of it's filter might be blocking that ad or reported scam. Further these days I have shifted to  solflare mobile app and it too doesn't have such spams.