The decentralized finance (DeFi) protocol Compound Finance, formerly known as Twitter account X, has fallen victim to hacking. The compromised account is now promoting a deceptive phishing site, as reported by security-focused X accounts Scam Sniffer and Officer’s Notes. The hacked account posted an advertisement for “free $COMP tokens” with a link leading to a scam site that mimics Compound Finance’s official website. Both Officer’s Notes and Scam Sniffer issued alerts warning users not to click on any links in the post.
Scam Sniffer detected the phishing link (compound-labs[.]xyz) 16 hours prior, originating from the official X account. The post also shared details of two Ethereum transactions. The first revealed a transfer of over 206,000 LINK tokens (equivalent to $3.2 million at the current price) from a Pink Drainer wallet to a known phishing scammer address. The second transaction involved the transfer of around 69,000 LINK ($1 million) from an account ending in 8dd4cf to a Pink Drainer wallet address.
Additionally, the post linked to a Scam Sniffer alert, identifying the account ending in 8dd4cf as the victim of the attack. Blockchain data indicates that the victim approved a transaction allowing the attacker to spend a substantial amount of LINK.
By FCCT Editorial Team
, an independent military force, and allied militias in Sudan raped several dozen women and girls in West Darfur’s capital, El Geneina, and those fleeing to Chad between late April and late June 2023, Human Rights Watch said today. The assailants appear to have targeted people because of their Massalit ethnicity and, in some cases, because they were known activists.){kind=link}