cryptoslate.com
Prominent blockchain security firm PeckshieldAlert and onchain sleuth Zachxbt revealed on Nov. 4 that a phishing scammer operating under the pseudonym Monkey Drainer had stolen 7 Cryptopunks and 20 Otherdeed NFTs.
#PeckShieldAlert @zachxbt has detected that Monkey Drainer grabbed ~ 7 CryptoPunks & ~20 Otherdeed #NFT
0xc…466 has transferred ~120 $ETH to Monkey Drainer 0x8…fB8 and 200 $ETH into Tornado cash https://t.co/MpJQoZjYWl pic.twitter.com/qdbFVPI6yY— PeckShieldAlert (@PeckShieldAlert) November 4, 2022
The news was first reported by self-acclaimed 2D scam detector ZackXBT, who estimated the stolen collectibles were worth 520 ETH — roughly $824,200.
Monkey drainer was also used recently when both AJT & Gabriel Leydon were sim swapped.
Prior to that he’s had other huge attacks as well. https://t.co/OlDCFvJ6BA pic.twitter.com/ZMcdnYFnRo
— ZachXBT (@zachxbt) November 4, 2022
The recent theft represents the second exploit by the Monkey drainer within ten days. On Oct. 25, the exploiter ripped off 700 ETH ($1 million) over 24 hours from several victims.
1/ Over the past 24 hrs ~700 ETH ($1m) has been stolen by the phishing scammer known as Monkey Drainer.
They recently surpassed 7300 transactions from their drainer wallet after being around for only a few months. pic.twitter.com/6vAYBiqCxQ
— ZachXBT (@zachxbt) October 25, 2022
Two of the largest victims lost $370,000 by signing transactions on malicious phishing sites operated by Monkey Drainer. One of the victims lost one BAYC, one CloneX, $36,000 in USDC, and 12 other NFTs worth around $150,000, whereas another held over $6.2 million worth of crypto at the time but only lost $220,000.
Update: Monkey spammed the thread with bots pic.twitter.com/gKvN1qhpol
— ZachXBT (@zachxbt) October 25, 2022
Monkey Drainer usually robs NFTs holders of their collection through phishing attacks setting fake crypto and NFT sites, posing as prominent blockchain platforms like Aptos and RTFKT.
Meanwhile, digital asset firms are bracing up against Monkey Drainer. Recently, Web3 security firm Chainabuse flagged four addresses connected to the Hacker.