flash on Nostr: ⚡️🚨 ALERT - Hackers have found a terrifying new way to steal cryptocurrency: ...
⚡️🚨 ALERT - Hackers have found a terrifying new way to steal cryptocurrency: convincing their victims to write the code themselves that will empty their wallets.
TRM Labs has identified 9 fake tutorials on YouTube explaining how to create a so-called crypto arbitrage bot using Claude.
The videos guided users step by step through the process of deploying a smart contract. But the fake compiler used secretly replaced the displayed code with a malicious contract.
Between February and August 2026, 224 victims reportedly lost 274.60 ETH, worth approximately $517,000 at the time of the thefts.
The most ingenious part is that there were no traditional phishing links, no suspicious authorizations, and no hacked wallets. The victims deployed the contract themselves, sent their ETH to it, and then confirmed each transaction. The videos even used AI-generated presenters and voices, as well as fake testimonials.
Published at
2026-09-19 19:49:36 UTCEvent JSON
{
"id": "7f26597a7777ea191d8ead39c24a50fea80293dee5fffdafccd23dc98268572b",
"pubkey": "4d7842051782e0d3feb034d150adc2b6bae4ee3b49786793bffa468b6f5b96b3",
"created_at": 1789847376,
"kind": 1,
"tags": [
[
"client",
"Primal iOS"
]
],
"content": "⚡️🚨 ALERT - Hackers have found a terrifying new way to steal cryptocurrency: convincing their victims to write the code themselves that will empty their wallets.\n\nTRM Labs has identified 9 fake tutorials on YouTube explaining how to create a so-called crypto arbitrage bot using Claude.\n\nThe videos guided users step by step through the process of deploying a smart contract. But the fake compiler used secretly replaced the displayed code with a malicious contract.\n\nBetween February and August 2026, 224 victims reportedly lost 274.60 ETH, worth approximately $517,000 at the time of the thefts.\n\nThe most ingenious part is that there were no traditional phishing links, no suspicious authorizations, and no hacked wallets. The victims deployed the contract themselves, sent their ETH to it, and then confirmed each transaction. The videos even used AI-generated presenters and voices, as well as fake testimonials. \nhttps://blossom.primal.net/6a8a2017812fe0340c5edd3f7d63e8eca90577fff4d5bc9d70e421c31c031f0a.jpg",
"sig": "42b29d73e3f7cc62ceb4a2b7a4209cfe579c05e63cde29ac41ae433724f2153c1d087897ce49cd17be2d1934f6eb73e816ac5ecae5306dae18bf255e34044175"
}
