@andehxbt - Andeh ❁
🚨Community Scam Alert @p2peers 🚨 ➼ http://P2peers.io was used by scammer (@Dvincent_) today to steal 29 MOONBIRD NFTS (>$700,000 USD). ➼ I've done my best to find out what happened on-chain and retrieved as much info as I can. Follow along with what I found 🧵👇 https://t.co/lXRw6fgcCl
@andehxbt - Andeh ❁
He offered his victim to trade for his NFT's on the p2peers.io-website. ➼ I will not reveal his identity but I have contacted him to hear his story. ➼ This occured approx. 10 hours ago ➼ This website is now DOWN. But, he approved the hacker's wallet to transfer his NFT's https://t.co/4atiXzMI1b
@andehxbt - Andeh ❁
This is the official Tx. ➼ @DVincent_ (hacker) wallet is (0x7ccf) and he is now approved as the operator of the victims wallet (0x5afcab) to transfer from the Moonbirds contract. ➼ I don't have evidence on how this happened, probably an approval function on the website. https://t.co/TebF6zXMIs
@andehxbt - Andeh ❁
➼ He goes on to transfer 29 Moonbird NFTs from victims wallet to his in less than 5 hours. ➼ He also takes other NFT's also. https://t.co/xLkdrSGQqE
@andehxbt - Andeh ❁
This is @Dvincent_ (hacker) NFT wallet in Debank. ➼ He has just under $700k estimated value worth of NFTs after this attack. ➼ He also has other PROOF collection NFT's from the same victim. https://t.co/vuPXa2aF7o
@andehxbt - Andeh ❁
I couldn't find @Dvincent_ on the internet, it was too hard. ➼ I was able to lookup the http://p2peers.io website he used, and it was been involved in MANY scams. ➼ As expected, most of the owner details are hidden. ➼ We do see the registrar is http://sarek.fi https://t.co/KWxF8YqsPa
@andehxbt - Andeh ❁
Then, I did a lookup of the http://sarek.fi domain registrar servers: ➼ This website was started in 2019. ➼ Belongs to an address in Finland. ➼ Owner is (recorded as) Sarek Oy and his telephone / mailing address is public. https://t.co/hZVRrgtk3f