Bitcoin Scammers Impersonate Police
In Colorado, a brazen scam has emerged where criminals impersonate law enforcement officials to extort Bitcoin from unsuspecting residents. These scammers contact victims by phone, posing as representatives of the local government. They claim the individuals have missed jury duty and must pay a hefty fine of $10,000, which they insist be settled in Bitcoin.
One victim transferred $6,000 in Bitcoin before the real authorities intervened, preventing the remaining $4,000 from falling into the scammers’ hands. This incident is not isolated. Other reports indicate scammers have spoofed the local Sheriff’s department’s phone number, further spreading their deceit. These con artists, posing as “Sergeant Schilling,” threaten victims with arrest for missing court dates unless they pay up. Fortunately, in these cases, none of the targeted individuals succumbed to the demands.
The Sheriff’s department has released a statement to clarify that they never request Bitcoin payments over the phone. This serves as a crucial reminder for crypto users: blockchain transactions are irreversible. Once sent, cryptocurrency cannot be retrieved, making it imperative to verify the legitimacy of the recipient.
Sunray Finance Suffers $2.7 Million Exploit
Sunray Finance, a trading platform on Arbitrum, faced a significant breach when an attacker exploited the protocol for $2.7 million. The hacker executed a contract upgrade, allowing them to mint an astronomical number of SUN tokens—200 sextillion, to be precise. They then liquidated half of these tokens for $2.1 million in Tether (USDT), causing the SUN token’s value to collapse.
The attacker appeared to overlook a second liquidity pool for SUN. An arbitrage bot capitalized on this oversight, buying 90 sextillion SUN from the dumped pool and selling it in the second pool, netting a profit of $560,000 in Ether (ETH). This action further tanked the price of SUN.
Sunray Finance promptly disclosed the breach, citing “a sudden issuance of Sunray treasury asset tokens.” They assured users that they are working diligently to recover data and urged patience during their investigation.
Blockchain security firm TenArmor suggested the hack might have been facilitated by a leaked private key, given the attack’s nature. Users should note that protocols with upgradeable contracts pose risks, as developers or admins can alter these contracts, potentially draining funds. Trust in the developer is paramount when interacting with such contracts, as even a trusted developer’s private key compromise can lead to exploitation.
Ramses Exchange Faces Reward Exploit
Ramses, another decentralized exchange on Arbitrum, encountered an exploit resulting in a $93,000 loss. Unlike Sunray Finance, this exploit stemmed from a flaw in the code, allowing the attacker to exploit the reward system.
The attacker manipulated the system using a single nonfungible token to claim rewards repeatedly, bypassing the intended reward period. This loophole enabled the draining of the reward pool.
Upon discovery of the breach, the Ramses team took swift action to halt the exploit. Security firm SolidityScan reported that the vulnerability allowed excessive rewards, though it remains unclear if this flaw existed in the audited version or was introduced later. Ramses assured users that their balances would remain unaffected.
Indian Crypto Scam Nets $297,000
In India, police in Dhone are investigating a cryptocurrency scam that has defrauded approximately 320 people across various regions. The alleged scammer, Ramanjaneyulu, is accused of amassing over 23 million Indian rupees ($297,000) from victims by promising them a monthly income of 10,000 rupees ($119) in exchange for depositing cryptocurrency with him.
He reportedly claimed affiliations with major exchanges like Binance and OKX and presented himself as a representative of an organic herbal company. The investigation is ongoing, with no formal charges filed yet.
These incidents highlight the persistent risks within the crypto space. Users must remain vigilant and exercise due diligence to protect against scams and exploits in the ever-evolving landscape of cryptocurrency.
