Unknown person loses over $717 000 in a phishing attack using a fake Blast website
The project had previously launched the mainnet, which drew increased attention from attackers
01.03.2024 - 13:27
932
3 min
0
Last updated on Aug 5, 2024
What’s new? Experts of the analytics platform Scam Sniffer have recorded a major phishing attack, realized with the help of a fake website of the Layer 2 (L2) network Blast based on the Ethereum blockchain from the creators of the Blur NFT marketplace. Thus, on March 1, an unknown user lost $717 817 in Aave BTC and Pandora assets by connecting his wallet to the fake website of Blast’s airdrop.
What else is known? Scam Sniffer called for vigilance as scammers creating fake Blast websites have become more active due to the recent launch of the project’s mainnet.
Thus, the launch of the Blast mainnet took place on February 29, allowing users to start using the ecosystem’s exclusive decentralized applications (DApps), as well as withdraw funds blocked in the protocol.
The protocol has been operating in early access mode since November 21, by the time the mainnet was launched, 181 888 users had blocked over $2,3 billion in the protocol, and over 3000 teams had started developing ecosystem projects.
The airdrop of the Blast native token is expected to launch in May as well. 50% will be received by users based on the points earned through blockchain funds, another half will be given to the 47 projects that won the Big Bang competition.
It also became known about the first case of scam of a Blast-based project. The developers of the RiskOnBlast gaming platform withdrew 420 ETH users for the amount of $1,25 million, deactivated the website and social networks, and transferred the funds to the exchanges ChangeNOW, MEXC, and Bybit. Over 750 users were affected.
On January 22, an unknown person lost $4,2 million in Aave Ethereum WETH, and Aave Ethereum UNI coins in a phishing attack.
Earlier, the MetaMask wallet team partnered with Blockaid to implement a mechanism to protect users from phishing attacks.
Useful material?
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026
Incidents
According to Blockaid, the attack may have been carried out by the same hacker behind the 1inch Fusion V1 exploit.
May 7, 2026
Incidents
The attacker gained administrative access and altered contracts to drain user funds
Apr 30, 2026


Telegram
Twitter