Crypto User Loses $1 Million in Sophisticated Ethereum Phishing Attack

The attackers initially attempted to drain a flat $1 million from the victim's wallet via multicall transactions. When the transfer failed because the wallet held slightly less than that amount, the perpetrators' script automatically recalculated the balance. Seconds later, they successfully withdrew the exact remaining funds, leaving the account empty. This specific attack vector remains a primary threat to crypto users, as victims are often tricked into granting unlimited spending permissions while believing they are authorizing a benign interaction.

Data from blockchain security firm CertiK indicates that such phishing scams resulted in $723 million in losses across 248 incidents in 2025. This theft follows another recent compromise earlier this month where a trader lost $1.65 million after interacting with a fraudulent exchange. Security researchers emphasize that users must rigorously verify every signature request and utilize detection tools to identify malicious contracts before confirming on-chain transactions.