Protection de Crise Zéro Stockage: Vos fichiers et preuves sont analysés uniquement en mémoire volatile et détruits immédiatement. Aucun historique ni sauvegarde dans le cloud.

Smart Contract DrainerNiveau de Gravité de la Menace: Critique

DeFi Liquidity Pool Voucher Scam: Tether & Trust Wallet Drainer

Deceptive ERC20/TRC20 approval vouchers that silently authorize unlimited wallet withdrawals.

"You do not have to send me money! Just keep your USDT in your own private Trust Wallet and click this voucher link to earn 3% daily passive yield from liquidity mining..."

Vérifier l'Authenticité avec Sealed Rose

Analyse Neuronale Instantanée · Gratuit · Sans Inscription · Zéro Stockage · En Mémoire

Vérifier Texte Généré par IA

This advanced cyber-scam merges romance grooming with decentralized finance (DeFi) exploits. The scammer builds romantic rapport, then casually mentions earning $1,000+ daily in passive income through a "liquidity mining pool". To disarm your suspicions, they tell you your money never leaves your own private non-custodial wallet (Trust Wallet, MetaMask, Coinbase Wallet). When you open their DApp link to "receive a certificate voucher", you unwittingly sign an unlimited token approval transaction (`approve(address, uint256)`). The moment your balance grows, the syndicate drains your wallet.

Signaux d’Alerte Critiques

1"Keep Funds in Your Own Wallet"

They emphasize that you do not send funds to them, tricking you into believing you have 100% control over your money.

2Opening a Custom URL in Your Wallet DApp Browser

They instruct you to copy a web link and paste it into the built-in browser of MetaMask, Trust Wallet, or Coinbase Wallet.

3Signing a Contract Without Gas Clarity

The web page displays a certificate or voucher button that prompts a transaction signature requesting permission to spend your USDT or USDC.

The Smart Contract Token Allowance Exploit

  • ERC-20 Permit / Approve: The smart contract asks for allowance permission with `type(uint256).max` (infinite approval) to the scammer’s smart contract address.
  • Silent Draining: Once approved, the scammer’s script monitors your wallet balance. Once it reaches a substantial balance, a bot executes `transferFrom` to siphon all funds.

Comment Se Protéger et Agir

ÉTAPE 1

Revoke Token Approvals Immediately

Visit Revoke.cash or Etherscan Token Approval tool, connect your wallet, and revoke all active permissions to unfamiliar smart contracts.

ÉTAPE 2

Migrate Remaining Assets to a New Hardware Wallet

Once a private wallet has signed a malicious permit, transfer all remaining coins to an uncompromised address.

ÉTAPE 3

Verify Your Dating Match on Sealed Rose

Verify if the person who introduced this mining pool is using an AI-generated persona or stolen photos.

Foire Aux Questions

How did they steal my money if I never gave them my seed phrase?

You signed a smart contract approval transaction. Under Ethereum/Tether token standards, an approval gives the smart contract legal permission to withdraw tokens directly from your wallet at any time.

Disponible en 23 Langues :