Warning for Airdrop hunters and web3 users

[Orpichukwu]

Most of our Nigerian brothers are so good at hunting airdrops. Even when all this Layer 2 airdrop is claiming, where a lot of people have benefited from it, and lootbots have been used for easy automation across chains, which have exposed their wallet private keys to the bot, and right now wallets connected to it are being drained, anyone who has used lootbots before and did not revoke even if they revoked access after then trying and checking if their wallet got affected and if it’s still safe should try and move their altcoins over to a safer wallet.

Thread first created on the general board

🚨 If you ever used @lootbot_ai , move your funds right now.

Someone has the private keys to wallets generated by LootBot and has been
draining them since 13:18 UTC on September 7. 252 ETH (~$620k) taken so far
from 3,825+ wallets across 9 chains. It is still running as I post this.

0x4e5df8422271690327c0348845b639196aB0081E

THIS IS A PRIVATE KEY COMPROMISE, NOT A PHISHING ATTACK.

1,967 wallets were swept on two or more chains. Five were swept on all seven.
Same address, different chains, minutes apart.

No approval, no signature, no malicious contract can do that—none of them.
can even move native ETH, let alone on seven chains at once. Only possession
of the key can. You didn't click anything. There was nothing to click.

https://x.com/somaxbt/status/2097297279921340482

[Davidvictorson]

Security and privacy comes first in the crypto space.
By now everyone should have known about this and those who know and ignore it or don't know pay a high price for it.
Thank you for sharing this...in my estimation, even without being told one should know to always move their coins to wallets they control.
Without control, the coins ain't yours.

[ZeroVinsonN]

Security and privacy comes first in the crypto space.
By now everyone should have known about this and those who know and ignore it or don't know pay a high price for it.
Thank you for sharing this...in my estimation, even without being told one should know to always move their coins to wallets they control.
Without control, the coins ain't yours.

It's actually not as much of a general knowledge as you might think it is, there are people who's coins are in unsecured wallets and they really don't know that it is at risk, they tell themselves that if no one else can login to their wallet then no one else can withdraw from it.
Most people are even using custodial wallets without really knowing that they are not in control of whatever they have inside or it, sometimes this confusion comes from people misunderstanding that there is a difference between custodial and self custodial, they always assume they are one and the same while in truth they are actually opposites of eachother.

[Barikui1]

Thank you for this update, but I stop doing airdrop since it stop being lucrative, and since the hamster saga, where I was given a very little reward for the stress and too much effort I put in, I decided never to engage in airdrop again because I started seeing it as a waste of time.

To those that are still into airdrop, my candid advice to you guys is that you should trying to use a new wallet when hunting for a new airdrop project, then once you are done, it's best to just withdraw everything out and move on from it, because keeping any asset there can be vulnerable, and this incident is a testament of that fact, so we should do well to protect ourselves and be safe in this digital space.

[Yablee0]

It's actually not as much of a general knowledge as you might think it is, there are people who's coins are in unsecured wallets and they really don't know that it is at risk, they tell themselves that if no one else can login to their wallet then no one else can withdraw from it.
Most people are even using custodial wallets without really knowing that they are not in control of whatever they have inside or it, sometimes this confusion comes from people misunderstanding that there is a difference between custodial and self custodial, they always assume they are one and the same while in truth they are actually opposites of eachother.

This may sound funny but that's the truth. Some people still can't really differciate them and that is where knowledge is still very important in things like this. I've been a victim of this, so I know what I am talking about.

Some times after messing around with some of all this airdrop, it is just fine we do away from those connected wallet to avoid things like this because they might have gotten some of your wallet details that are very important from your wallet and you wouldn't know till something bad have happened. Maybe if their are some fund's in it you can move them to a safer wallet to avoid hearing stories that touch and I know this might cost nothing, Just for safety purposes.

[Ashawowo(OS)]

Some times after messing around with some of all this airdrop, it is just fine we do away from those connected wallet to avoid things like this because they might have gotten some of your wallet details that are very important from your wallet and you wouldn't know till something bad have happened. Maybe if their are some fund's in it you can move them to a safer wallet to avoid hearing stories that touch and I know this might cost nothing, Just for safety purposes.

Some wallets were connected to these bots to claim these airdrops, like on Ton as in 2024 tapping game saga, but after the claiming, those wallets were disconnected from those third-party sites. From an obvious thought, one would think disconnecting those wallets later on means they're now safe from exploitation.

Now the question is this, Are those previously connected wallets, but now disconnected at risk as well, and is it possible the third-party sites retain the ability to drain these wallets even as they've been disconnected?

[Big Dirams]

Security and privacy comes first in the crypto space.
By now everyone should have known about this and those who know and ignore it or don't know pay a high price for it.
Thank you for sharing this...in my estimation, even without being told one should know to always move their coins to wallets they control.
Without control, the coins ain't yours.

Security and privacy is always important in this space because one foul play then the scammers takes the leak. I know some people might be clueless about this security and privacy first because they aren’t actually into the system deeply, they are just after the quick money this airdrops offers so they don’t actually takes this security seriously but it annoying when those that have the clue and idea about how important it is to be well guided when it comes to our security and privacy but they just become unconcerned all of a sudden just over the temporary benefits they gain and not knowing even if the oblivious acts of theirs  didn’t affects them now it might in the future that why we need to be extra careful in terms of our security and privacy.

[Doan9269]

Some will be using a particular platform to hunt for airdrops and eventually got haunted by them, taking advantage of the entire process to penetrate your wallet and scam you, some will also request you to connect your wallet to their platform and other related unsafe practice is that some people engage doing without knowing the implication to these, if you know how the value of AirDrop contain is so underrated and could mean nothing than to just have an avenue to learn about cryptocurrency transaction and payment, we will definitely realize that newbies are only expected to engage in it and by experienced users.

[Orpichukwu]

Thank you for sharing this...in my estimation, even without being told one should know to always move their coins to wallets they control.
Without control, the coins ain't yours.

In the case of the victims, they have access and control over their wallet and coins, at least not until the attack happens. It's not like they are using a centralised system which is holding their coin, but this is a situation where you connect your wallet to a DApp just as you can connect to Dex like Uniswap, but from the other end, that tool stored the private key of that wallet, which users might not be aware of. Even when the project was later declared to be a scam, some paid deep ears to it until now that they are getting drained..

[promise444c5]

Did a little research after your recent post on BD board.. Lootbot also offers a wallet service through telegram: [https]://t.me/lootbotportal  and that wallet seem to have been given all it users a compromised address since it’s creation…

Now, the revoke you mentioned, doesn’t work in this case and every wallet that has recently interacted with or create by this wallet are at risk of drain if not already drained..

[Cossyblack]

Well, i stop hunting for airdrops a long time ago and the wallet that i was using back then had nothing valuable on it other than those airdrops,and the wallet was only meant for receiving airdrops,all the airdrops that I did back then were connected to that single wallet that has nothing valuable on it because I did wanted to hear any story that touch. I was very careful those times that's why i don't need to worry myself because i have nothing to lose in that wallet. In this crypto space, every airdrops hunters has to be smart so that they don't fall prey to this kind of scam.

[Sobz]

Thank you for this update, but I stop doing airdrop since it stop being lucrative, and since the hamster saga, where I was given a very little reward for the stress and too much effort I put in, I decided never to engage in airdrop again because I started seeing it as a waste of time.

To those that are still into airdrop, my candid advice to you guys is that you should trying to use a new wallet when hunting for a new airdrop project, then once you are done, it's best to just withdraw everything out and move on from it, because keeping any asset there can be vulnerable, and this incident is a testament of that fact, so we should do well to protect ourselves and be safe in this digital space.

Scam in airdrop is alarming and it think it is not even worth it to hunt, i would even prefer if people can complete ignore some airdrop because they are not profitable and at the end of this exercise if you are not lucky you may end up getting scammed. Some of the airdrop by the end of it people end up getting just little profit but with time the token loses value in the market and it would be no where to be found. Airdrop this days is used as a target to scam later on especially most of the telegram airdrop.

[Orpichukwu]

Now, the revoke you mentioned, doesn’t work in this case and every wallet that has recently interacted with or create by this wallet are at risk of drain if not already drained..

The revoke suggestion was previously made on the source where I got the information from, which I don’t even agree with the idea of much; it's better to check the wallets back and see if there is anything left since it was reported that they are draining it chain by chain and not all in an instant. Some people later claimed on X that they were able to save some of their funds under Polygon and one other chain which was untouched at that moment.

[Silverstonez]

Op thank you for sharing this useful information,  although I’m not an airdrop hunter but I have friends who have been hunting airdrops for over two years or so which one of them have mentioned @lootbot_ai to me before.  They are not in the forum though,  so I will quickly pass on the information to them in case they have any of their wallets connected to the @lootbot_ai.

[AVE5]

Most of our Nigerian brothers are so good at hunting airdrops. Even when all this Layer 2 airdrop is claiming, where a lot of people have benefited from it, and lootbots have been used for easy automation across chains, which have exposed their wallet private keys to the bot, and right now wallets connected to it are being drained, anyone who has used lootbots before and did not revoke even if they revoked access after then trying and checking if their wallet got affected and if it’s still safe should try and move their altcoins over to a safer wallet.

That's a very sensitive matter that many of the beginners as we cares for our fellows to take very important because the airdrop being a rewarding projects that enthusiasts participates in hunt's of earning free crypto currencies has been intertwined with scammers using the airdrop projects as a means to steal participants funds from their wallets after they're asked to connect their wallets to claim their prizes.
I'm sure that there're still some credible good airdrops out there though but my humble advice is that you should not attach or connect your main wallets which you already holds your coins to any third party platform else, such could be a means to drain your wallets.

[promise444c5]

Now, the revoke you mentioned, doesn’t work in this case and every wallet that has recently interacted with or create by this wallet are at risk of drain if not already drained..

The revoke suggestion was previously made on the source where I got the information from, which I don’t even agree with the idea of much; it's better to check the wallets back and see if there is anything left since it was reported that they are draining it chain by chain and not all in an instant. Some people later claimed on X that they were able to save some of their funds under Polygon and one other chain which was untouched at that moment.

Yes I saw it aswell.. I guess initially that what people and some sources taught and maybe if people revoked it could have helped saving their until amore and more kept erupting even those that did it. Which  means someone who had access to the source code discovered a vunerability and took the chance or it was planned by the team since the beginning.

Look at it..  it a big cash out

The pattern looks like a planned one to me..

[Obim34]

~snip

I thought this was one of the very first scam attacks that has been around ever since, and everyone is supposed to be aware of it? I'm disgusted with investors, mostly those who have been and accumulated years of assets and are losing it due to this nursery sting.

Lesson learnt to some, while this similar scam will happen again, several people will still fall into the trap.

[adultcrypto]

The name a lone sound suspicious.  How can someone trust something named "lootbot" without thinking it properly to understand that it was created for looting people's money. As scams have become sophisticated,  I have learnt to avoid some activities that might expose me to one of them such as airdrop hunting especially through bots. The reward for these airdrops are not just worth the risk that they carry, so the best is to stay away.

[Webutxo]

Security and privacy is always important in this space because one foul play then the scammers takes the leak. I know some people might be clueless about this security and privacy first because they aren’t actually into the system deeply, they are just after the quick money this airdrops offers so they don’t actually takes this security seriously but it annoying when those that have the clue and idea about how important it is to be well guided when it comes to our security and privacy but they just become unconcerned all of a sudden just over the temporary benefits they gain and not knowing even if the oblivious acts of theirs  didn’t affects them now it might in the future that why we need to be extra careful in terms of our security and privacy.

Most airdrop hunters don't care about any of the things you say, when they see a website that ask them to upload their family members and all their information, they are not going to hesitate as long as they are going to make money from it. I think the dependency of people trying to make money has made them to lose their simple ways of security measures that's why all of these things happen today, some of them even make the money and lose it to bots.

Till now, there are many of them that are crying about wallet hack and drain, some of them has done this months ago, they don't know they have compromise their wallet to other platform and as soon as they receive deposit on their wallet, they lose everything the second the coin get to their wallet. What's interesting about those scammers is they can have patience to scam people even if it will take long time.

[Nightwatchmare]

The few years i spent in crypto and this forum i have not heard anyone mentioning lootbot_ai this is my first time of hearing of it. I'm not surprised that people who connected their wallets to lootbot_ai their wallets private key have been exposed because from the name lootbot_ai it is obvious that the creators of the lootbot_ai just want to loot people's hard earned money. However, people who are affected and their wallets is yet to be drained should move their funds to another wallet so that lootbot_ai will not come like a thief in the night and move their funds. Those that are specialists in hunting airdrops should always dedicate a wallet for airdrops so that if they find themselves in this type of situation they will not worry themselves of anything.