An on-chain investigator using the pseudonym VAL published an analysis of the scam on X: more than $2.2M was stolen through a phishing site that ChatGPT provided in response to a user’s query. One user lost $2.1M of that amount after signing an unlimited token approval that allowed the attackers to withdraw the funds.
The user asked ChatGPT where to exchange sFLR for WFLR, and the model provided a link to a phishing site. The victim connected their wallet and signed an unlimited approval. Around 1.9 million FXRP tokens worth $2.1M were then withdrawn from the same address.
The scam operator distributed the funds across several addresses. First, the operator exchanged FLR for DAI through OpenOcean, then bridged part of the funds, converted them into ETH, and moved them to mixers. The operator’s addresses currently hold around 380,000 DAI and 889 ETH.
On June 12, after 1.9 million FXRP worth $2.1M was withdrawn from one victim, the main address stopped receiving FLR. Since then, the operator has continued moving and mixing the funds that had already been obtained.
The investigator checked ChatGPT’s responses in several languages and found that the link to the phishing site no longer appears in the model’s responses.
Read Also: