Amid a bullish trend in the cryptocurrency market, the prevalence of fraudulent decentralized applications (DApps) using the notorious Inferno Drainer tool has surged dramatically.
Web3 security firm Blockaid reports that, as of July 2024, around 40,000 DApps are now utilizing Inferno Drainer. Blockaid’s R&D leader, Oz Tamir, revealed that the rate of new malicious DApps employing this tool has soared, climbing from 800 per week earlier in the year to 2,400 per week.
Inferno Drainer, a phishing tool designed to access crypto wallets by tricking users into authorizing token approvals, had previously been linked to $70 million in theft before supposedly shutting down in 2023. However, it has resurfaced with increased activity this year.
Tamir argues that Inferno Drainer, while sophisticated, is not uniquely effective. He notes that scammers choose tools based on current availability and associated fees, rather than any specific feature of the tool itself.
The rise in Inferno Drainer’s usage reflects a broader increase in scam attempts, which Blockaid attributes to the expanding crypto market. As new investors and significant capital enter the space, attackers are more motivated to exploit vulnerabilities, particularly in emerging blockchain platforms with less robust security measures.
Avraham Eisenberg, known for orchestrating the 2022 Mango Markets exploit, has been handed a 52-month prison sentence—but not for his crypto-related activities.
Loopscale, a decentralized finance platform built on Solana, was forced to pause its lending operations after a major security breach led to losses of around $5.8 million.
Alex Mashinsky, co-founder and former CEO of the defunct crypto lending platform Celsius, is scheduled to be sentenced on May 8, 2025, following his guilty plea to two federal criminal charges late last year.
A decentralized exchange targeted in a multi-million-dollar exploit has recovered its losses just days after the incident, thanks to an unexpected twist involving the hacker themselves.