Scammers make victims build the drainers that empty their own wallets

[TastyChillySauce00]

Back then people were pasting random code from internet into their computer's terminal, now people are pasting random smart contract code and deploy it without understanding what it did and what is the risk, problem as old as tale, generally speaking if you don't know what the code is doing, you should at least ask the AI what the code is doing and get an explanation, or never paste it at all.

People honestly seems like they don't really care if they are losing money otherwise they would at least think twice about doing it and be doubtful. On the other hand, didn't Claude or any AI in that matter give precaution that the contract code might be malicious? Claude gives warning whenever it audited a contract code, I bet it gives the same warning with this kind of dangerous prompt but might be ignored.

[taufik123]

There are many X accounts that share this kind of thing, building trading bots with AI, building LP Farming Bots and others that rely on AI and claim that they can make more profits in the instant way that the Bot runs.
Seeing how this fact you shared made me think, it is very easy for scammers to trick ordinary users into being interested and using codes that they don't even know what the code is embedded.

I am sharing this to show how dangerous it is to run code you don't understand and how trusting unknown people on the internet can be dangerous, especially those who claim they want to help you make money.

I've always been aware of my own security and really don't trust random people, not even trust your friends who suddenly share an unknown link or program or other investment invitation.

The lesson here is: don't copy and run unknown code. Don't open unknown files. Don't trust people you don't know who want to help you get rich. They might be looking for a way to get rich off of you. Keep both eyes open at all times.

The sad part of this story is that the victims made and deployed the drainers that stole money from themselves.
Source:
https://x.com/wyckoffweb/status/2101671671727898870

The first thing I need to do when I see this kind of shared code or application etc., I always check how the Virustotal scan results and usually if it is embedded with malicious code,
phishing and some kind of code that takes over and empties the user's wallet, it will be readable.

Then whether the code is Open Source or not and they or serious developers will share their code on GitHub and then all users can check if the code is safe or not,
because many developers can also see.
If the code is malicious, of course there will be a warning and may be reported.

[Brahmahatyaa]

.. But I don’t get why he keeps funding.. is he daft?

He had already deleted all of the files and believed the issue had been resolved. To verify this, he created a new wallet and funded it with less than €20. The funds remained safe at first, but once he began transferring a larger amount of assets to the new wallet, everything was drained again within seconds.

[Danish Ali]

The sad part of this story is that the victims made and deployed the drainers that stole money from themselves.

how can you sign a smart contract without looking at what you’re doing? they deployed it on their own computers.

followed some guy’s video, went straight to the “confirm” part, and just did it. ethereum wallets show you what contract you’re signing with and what function it’s calling before it lets you sign.

An attacker is always more interested in the victim's wallet than the victim themselves is. That is why victims let their guard down.

Yes, that's true, but I think the biggest problem with these scam videos is that they are teaching users that it is normal to click the "approve" popup, just as you would when you're watching a tutorial for some other piece of software and you're shown through the installation wizard. So, even victims who DO understand what code they're approving are still vulnerable because of habit.

I read similar article released by Sentinel Labs last year.

Good find. If this exact scam pattern was documented a year ago and still working now with 200+ wallets drained, that tells you YouTube isn't really doing much to catch or remove these tutorials even when researchers already flagged the method publicly.

[Pmalek]

..This is a high rate of scam, That redirect whatever someone have to their own wallet....That means they was a link sent to the victim which the victim clicked that redirects it funds in the wallet to the scam bot wallet...

No, there was no link sent to the victims. They weren't asked to download something from a malicious site either. They believed they were being taught how to build a trading bot from scratch as I explained in the OP. That bot, like any other software, needs code to run. Scammers gave them the code they needed to use. Believing that all was legitimate, the victims followed instructions and ended up digging their own graves. Instead of trading bots, they created drainers that emptied their own wallets.

[Somegory]

People should just stop looking for what's not lost online, if you need some AI tool or software find a official platform and pay for it, the time for free softwares online is over, always verify or pay dearly for your mistake..

Stop using torrents to find free softwares, hackers will gladly spend time upload free software with malwares and Trojans for long throat humans who don't want to pay for anything in their lives.

The most important advice for anyone who can't do without free tools and software is to take your coins as far away as you can from your computers into a cold storage instead, and keep your recovery seeds away from your computers.

[FinneysTrueVision]

ethereum wallets show you what contract you’re signing with and what function it’s calling before it lets you sign.

Not all smart contracts have decodable metadata that can be interpreted by wallets. In those situations, the wallet will just show you the raw hexadecimal data. The wallet usually displays a warning when you are blind signing, and if it is a good wallet, it should also perform a simulation showing you what is about to happen. This is very helpful in preventing theft, but not every wallet has the latest security features available.