New crypto scam drains users' wallets without transaction approval(beware).

[albon]

This topic is an important warning for all beginners, especially for holders of ERC-2612 tokens who believe that the theft of their tokens occurs only through approving the transaction but through the signature made by the wallet owner.

Through an unofficial Telegram or Discord bot, users are directed to a phishing site. This poses a significant threat to users. Beginners should only open and join the official links to the project's accounts, groups, and channels on communication applications and social media sites. And not connect their main wallet to any unknown sites, especially airdrop hunters and investors looking for new ERC-2612 coins to invest in, with attackers' methods evolving day after day if investors are not aware of what they're doing and don't learn from stories like the one mentioned by OP, then their wallets may inevitably be drained, and the assets they are holding may be stolen.

[tvplus006]

Do you mean the wallet can be drained without transaction approval?...

You need to follow the link to https://cointelegraph.com/news/new-scam-drains-wallets-without-user-approving-transaction, and read the details in the article: "The scam only works on tokens that comply with the ERC-2612 token standard, which allows for “gas-less” transfers or transfers by a wallet that does not hold Ether (ETH). While the method does not require users to approve a transaction, it appears to require tricking the user into signing a message.".

[FinneysTrueVision]

I am not too familiar with ERC-2612 tokens and the concept of gasless token transfers so I had not really considered the possibility of this kind of attack. Whenever a website asks for a signature to log in I don’t really think twice about it but I will be more careful from now on.

Since these types of transfers still require gas to be paid by whoever spends on your behalf, using the signature you provided, I can’t see too many dapps using this but it is something which will be appealing to scammers who can sacrifice a bit of gas in order to steal users’ funds.

[Pi-network314159]

Let us all be guided and beware of this new trick were approvals are not requested before our funds are lost.
As we all struggle to earn legitimately others are waiting for us to gather and they collect from us. millions has already been lost. I didn't know what I know now if not, I wouldn't be scam the time it happened to me.
Because information is power. Let us all safeguard our investment

https://cointelegraph.com/news/new-scam-drains-wallets-without-user-approving-transaction

I never knew hackers cans drain coin from wallet without a trace or without transaction approval. But from this your thread I have learnt something but from the article you Sheard I am seeing where they said that the scam only works with token that comply with ERC-2612 token. Check image from your link below.

I don't know much about this maybe if I will need someone to explain for me better.

[teamsherry]

Do you mean the wallet can be drained without transaction approval?

How is this possible when there's no gas fee used to initiate the transaction?
You also haven't mentioned which network is unsafe: ETH, BNB, SOL, etc.
You could've quoted some lines from the article for readers to understand without going through the whole article.
Anyways, thanks for the info.

Like he gave such an incomplete advice, how would I know what your are warning me about, or maybe he didn't even understand the information he was trying to pass.

Everyone needs to be careful about the crypto space scammers are getting more innovative everyday and would even disguise as legit company to get access to our funds, it's better you work with trusted platforms like electrum and blue wallet that has so many positive usage and reviews than just jumping into a new wallet without prior knowledge to it's developers or team behind it's creation.

[boyptc]

With the airdrop mania, many are requiring to connect the wallets for those projects. Tip, if you're a participant, always use a fresh wallet that you have never used before without any deposit.

That's a way to keep yourself free away from these scam projects or projects that conceal their main plan of tricking people. Those that are prone to these are the ones that are careless into connecting their wallets to unknown websites.