On 08.07.2026 an Ethereum wallet holder signed a malicious transaction and subsequently lost 999 999 USDT to attackers.

Incident details

Security analysts at Scam Sniffer reported that a phishing signature provided attackers with control over the victim’s funds.

The theft was executed in three separate transfers of 639 999 USDT, 159 999 USDT and 200 000 USDT, respectively.

Onchain explorers show the recipient address is now flagged as a phishing address on Etherscan, according to the analysts' notice.

Recommendations from analysts

Scam Sniffer advised users to carefully verify every signing request and avoid approving transactions in haste or under time pressure.

The analysts also recommended installing browser extensions and other detection tools designed to identify scam contracts and fake interfaces.

Related incidents and industry impact

On 04.07.2026 another wallet owner reportedly lost $1.65 million after connecting to a counterfeit exchange and signing a malicious contract.

Security firm CertiK estimates the crypto industry lost $1.32 billion during the period 01.01.2026–30.06.2026 due to security breaches and related incidents.