If you have been scammed…
Feel free to save & share it if you know someone who has been scammed or hacked and lost crypto!
You may order an investigation from the amlbot.com/reclaim-crypto (my referral link) or analybits.xyz. You can also directly DM Rata on Telegram or Twitter ❗️
Important to mention: only crypto-focused tip. For more InfoSec head to:
I — Bitcoin
- May order an investigation from the amlbot.com/reclaim-crypto (my referral link) or analybits.xyz .
- Report here: www.chainabuse.com & cryptoscamdb.org or phishtank.org
- Establish endpoint cluster (use github.com/OffcierCia/On-Chain-Investigations-Tools-List ) and contact it.
- Once again, do not hesitate to contact/tag/email/DM CEXes, Wallet’s support, stablecoin-companies, DEXes and Protocols! Ask, ask and ask! Then repeat. Email or message costs 0$ for you.
II — Others (Mostly, EVM)
- Revoke approvals via revoke.cash or cointool.app or app.unrekt.net or mirror.xyz/0x17e1F2A87F874D4C5E56d323caB45A4301D0325D/8OEm3pJ5vLcPrE8W3IBqfnq-IUGMhKBB368NZtCwz1I
- If you see zero approve tx — don’t touch it, read: officercia.mirror.xyz/n-sXszeDoNU3wtUUxRQEYvxQlZ6loaFElILzm2gnMzw and mirror.xyz/x-explore.eth/cL3d_CyNujXq8XY7ueP4omNXx_IY1EG5Dz0FD0vJ90M
- Signing is also dangerous! twitter.com/officer_cia/status/1609273593606578177 use transaction simulators & multi-sig.
- Establish endpoint cluster (use github.com/OffcierCia/On-Chain-Investigations-Tools-List ) and contact it.
- May order an investigation from the amlbot.com/reclaim-crypto (my referral link) or analybits.xyz .
- If you need to escape the rest of the funds (if you seed/key is comprised) head to whitehat.flashbots.net
- Report here: www.chainabuse.com & cryptoscamdb.org or phishtank.org
- Establish endpoint cluster and report to CEX/P2P directly.
- Once again, do not hesitate to contact/tag/email/DM CEXes,Wallet’s support, stablecoin-companies, DEXes and Protocols! Ask, ask and ask! Then repeat. Email or message costs 0$ for you.
Escape funds quickly (EVM/MEV method):
One amazing researcher made this simple flashbots bundler app to help people with white-hat recoveries of compromised accounts:
You can use the UI to generate a new flashbots rpc, build the bundle by sending ETH for gas, then the recovery TX, then withdraw remaining funds. Then when you hit submit bundle it goes through a relayer which is maintained by the community!
We’ve used it to help a few people that had leaked wallets private keys or seeds and, specifically, sweeper bots. If you know anyone who has this issue feel free to send them this way!
- Here’s a video walkthrough: www.youtube.com/watch?v=itPz35FGGJk
If you use it, I recommend paying around 3x the gas price to get included. And make sure your bundle is over 42k gas or it will be ignored by the network!
Or use:
Bitcoin:
For Bitcoin there was a similar solution — you can use something like this or this. A private pool. Can be compared to using flash-bots or Taichi on Ethereum:
- Accelerator (Choose Paid accelerating)
- Broadcatst
Also check out:
III — Bad Tips
At the moment, you can only block funds through an official appeal…but someone may come up with:
- Honeypot a hacker via: twitter.com/lordnarfz0g/status/1554649309580300288 CDN NFT honeypot (Canarytokens and Iplogger), or other honeypots:
- Read: medium.com/@alxlpsc/critical-privacy-vulnerability-getting-exposed-by-metamask-693c63c2ce94
- Using AD-INT (via MAC Address & ads).
Telegram:
For educational purposes only! You have been warned. Illegal activity is bad.
