{"id":55761,"date":"2023-08-01T08:35:06","date_gmt":"2023-08-01T12:35:06","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=55761"},"modified":"2023-08-01T08:35:08","modified_gmt":"2023-08-01T12:35:08","slug":"tether-blacklists-zero-transfer-scammer-who-stole-20m-usdt","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/tether-blacklists-zero-transfer-scammer-who-stole-20m-usdt\/","title":{"rendered":"Tether Blacklists Zero Transfer Scammer Who Stole $20M USDT"},"content":{"rendered":"\n<p>On August 1, a hacker using a zero transfer phishing attack stole $20 million worth of Tether before being blacklisted by the <a href=\"https:\/\/coinscreed.com\/staging\/tether-signs-mou-with-the-government-of-georgia.html\" target=\"_blank\" rel=\"noreferrer noopener\">stablecoin's issuer, Tether.<\/a><\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-4.png\" alt=\"Tether Blacklists Zero Transfer Scammer Who Stole $20M USDT\" class=\"wp-image-55769\" width=\"777\" height=\"462\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-4.png 683w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-4-300x178.png 300w\" sizes=\"(max-width: 777px) 100vw, 777px\" \/><figcaption class=\"wp-element-caption\">Tether Blacklists Zero Transfer Scammer Who Stole $20M USDT<\/figcaption><\/figure>\n\n\n\n<p>A zero transfer fraudster allegedly stole 20 million USDT from the victim address 0x4071\u20269Cbc, as reported by the on-chain analytics firm PeckShield. <\/p>\n\n\n\n<p>The victim intended to send funds to the address 0xa7B4BAC8f0f9692e56750aEFB5f6cB5516E90570; however, the funds were sent to a fraudulent address: 0xa7Bf48749D2E4aA29e3209879956b9bAa9E90570.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1003\" height=\"213\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-2.png\" alt=\"\" class=\"wp-image-55766\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-2.png 1003w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-2-300x64.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-2-768x163.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-2-750x159.png 750w\" sizes=\"(max-width: 1003px) 100vw, 1003px\" \/><figcaption class=\"wp-element-caption\">The zero transfer phishing scam. Source: Etherscan<\/figcaption><\/figure>\n\n\n\n<p>The wallet address of the victim initially received $10 million from a Binance account. The victim then forwarded it to another address before the hacker intervened. The con artist then sent a fraudulent transfer of zero <a href=\"https:\/\/coinscreed.com\/staging\/usdt-dump-causes-depeg-scare-curve-3pool-shift.html\" target=\"_blank\" rel=\"noreferrer noopener\">USDT tokens<\/a> from the victim's account to the phishing address.<\/p>\n\n\n\n<p>A few hours later, the victim wired 20 million USDT to the con artist, believing they were transmitting the funds to the victim's desired address.<\/p>\n\n\n\n<p>Tether, the issuer of USDT, promptly froze the wallet, which raised eyebrows due to the promptness of the action.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"embed-twitter\"><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/PeckShieldAlert?src=hash&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">#PeckShieldAlert<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a> A <a href=\"https:\/\/twitter.com\/hashtag\/ZeroTransfer?src=hash&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">#ZeroTransfer<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> scammer grabbed 20M <a href=\"https:\/\/twitter.com\/search?q=%24USDT&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$USDT<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> from 0x4071&#8230;9Cbc.<br>Intended Address: 0xa7B4BAC8f0f9692e56750aEFB5f6cB5516E90570<br>Phishing Address: 0xa7Bf48749D2E4aA29e3209879956b9bAa9E90570<a href=\"https:\/\/twitter.com\/hashtag\/Tether?src=hash&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">#Tether<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> <a href=\"https:\/\/twitter.com\/search?q=%24USDT&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$USDT<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> has already added the scammer&#39;s address 0xa7bf&#8230;0570 to the\u2026 <a href=\"https:\/\/t.co\/Y0APPTxIrT\" target=\"_blank\">pic.twitter.com\/Y0APPTxIrT<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/p>&mdash; PeckShieldAlert (@PeckShieldAlert) <a href=\"https:\/\/twitter.com\/PeckShieldAlert\/status\/1686278380306731008?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">August 1, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/div><\/figure>\n\n\n\n<p>Users typically examine the first or last five digits of a <a href=\"https:\/\/coinscreed.com\/staging\/defi-platform-oasis-will-block-wallet-addresses-deemed-vulnerable.html\" target=\"_blank\" rel=\"noreferrer noopener\">wallet address<\/a> rather than the entire address, leading to the transfer of assets to a fraudulent address. <\/p>\n\n\n\n<p>The victim is duped into transferring a zero-token transaction from their wallet to an address that resembles an address to which they have previously sent tokens.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-3.png\" alt=\"\" class=\"wp-image-55767\" width=\"711\" height=\"424\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-3.png 1005w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-3-300x179.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-3-768x458.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-3-750x447.png 750w\" sizes=\"(max-width: 711px) 100vw, 711px\" \/><figcaption class=\"wp-element-caption\">How a zero transfer scam works. Source: Coinbase<\/figcaption><\/figure>\n\n\n\n<p>For example, if the victim sent 100 coins to an address for an exchange deposit, the attacker could transmit 0 coins from the victim's wallet to a similar-looking address under their control. <\/p>\n\n\n\n<p>The victim may transfer their cryptocurrency to the phishing address after viewing this transaction in their transaction history and assuming that the displayed address is correct.<\/p>\n\n\n\n<p>Multiple instances of zero-transfer phishing schemes have surfaced in the crypto ecosystem over the past year, demonstrating their prevalence. Since December 2022, when one of the first <a href=\"https:\/\/info.etherscan.com\/zero-value-token-transfer-attack\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">zero transfer scams<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> occurred, over $40 million has been lost to such attacks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On August 1, a hacker using a zero transfer phishing attack stole $20 million worth of Tether before being blacklisted by the stablecoin&#8217;s issuer, Tether. A zero transfer fraudster allegedly stole 20 million USDT from the victim address 0x4071\u20269Cbc, as reported by the on-chain analytics firm PeckShield. The victim intended to send funds to the [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":55769,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[81],"tags":[1103,15555,15556],"class_list":["post-55761","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-altcoin-news","tag-tether","tag-tether-usdt","tag-zero-transfer-scam"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/image-4.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/55761","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=55761"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/55761\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/55769"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=55761"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=55761"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=55761"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}