Bảo vệ Khẩn cấp Không Lưu trữ: Tệp bằng chứng của bạn chỉ được phân tích trong bộ nhớ tạm và lập tức bị hủy vĩnh viễn sau khi quét xong. Không lưu nhật ký hay đám mây.
DeFi Liquidity Pool Voucher Scam: Tether & Trust Wallet Drainer
Deceptive ERC20/TRC20 approval vouchers that silently authorize unlimited wallet withdrawals.
Xác minh tính xác thực với Sealed Rose
Phân tích mạng nơ-ron tức thì · Miễn phí · Không cần tài khoản · Không lưu trữ dữ liệu · Xử lý trực tiếp trên RAM
This advanced cyber-scam merges romance grooming with decentralized finance (DeFi) exploits. The scammer builds romantic rapport, then casually mentions earning $1,000+ daily in passive income through a "liquidity mining pool". To disarm your suspicions, they tell you your money never leaves your own private non-custodial wallet (Trust Wallet, MetaMask, Coinbase Wallet). When you open their DApp link to "receive a certificate voucher", you unwittingly sign an unlimited token approval transaction (`approve(address, uint256)`). The moment your balance grows, the syndicate drains your wallet.
Dấu hiệu cảnh báo nguy hiểm
1"Keep Funds in Your Own Wallet"
They emphasize that you do not send funds to them, tricking you into believing you have 100% control over your money.
2Opening a Custom URL in Your Wallet DApp Browser
They instruct you to copy a web link and paste it into the built-in browser of MetaMask, Trust Wallet, or Coinbase Wallet.
3Signing a Contract Without Gas Clarity
The web page displays a certificate or voucher button that prompts a transaction signature requesting permission to spend your USDT or USDC.
The Smart Contract Token Allowance Exploit
- ERC-20 Permit / Approve: The smart contract asks for allowance permission with `type(uint256).max` (infinite approval) to the scammer’s smart contract address.
- Silent Draining: Once approved, the scammer’s script monitors your wallet balance. Once it reaches a substantial balance, a bot executes `transferFrom` to siphon all funds.
Cách tự bảo vệ và xử lý
Revoke Token Approvals Immediately
Visit Revoke.cash or Etherscan Token Approval tool, connect your wallet, and revoke all active permissions to unfamiliar smart contracts.
Migrate Remaining Assets to a New Hardware Wallet
Once a private wallet has signed a malicious permit, transfer all remaining coins to an uncompromised address.
Verify Your Dating Match on Sealed Rose
Verify if the person who introduced this mining pool is using an AI-generated persona or stolen photos.
Câu hỏi thường gặp
How did they steal my money if I never gave them my seed phrase?▼
You signed a smart contract approval transaction. Under Ethereum/Tether token standards, an approval gives the smart contract legal permission to withdraw tokens directly from your wallet at any time.
Hỗ trợ 23 Ngôn ngữ: