Holders of World Liberty Financial (WLFI) tokens are facing not just declining prices, but also security risks just one day after the token’s trading launch.
Key Points:
-
Exploitation Method: Hackers are using a vulnerability linked to Ethereum’s recent Pectra upgrade to siphon WLFI through a method identified as a “classic EIP-7702 phishing exploit.”
-
Attack Mechanism: The hack utilizes a malicious delegate contract that reroutes deposits to addresses controlled by hackers, complicating users’ attempts to recover their funds.
-
Trading Events: The WLFI token, associated with Donald Trump, started with a supply of 24.6 billion, hitting a peak of 33.13 cents but later plummeting to 24.27 cents, according to CoinGecko data.
-
Security Concerns: SlowMist Founder Yu Xian indicated that multiple wallets associated with WLFI were compromised using the previously mentioned exploit. “When you transfer tokens, the gas input gets transferred away, and typical entry points for hackers include private key leaks from phishing sites,” he noted.
“又遇到一位玩家多个地址的 $WLFI 都被盗事件…”
“I encountered a player whose multiple addresses for $WLFI were hacked, and their method of theft was again exploiting a malicious 7702 delegate contract linked to private key leakage.” (Translated Quote)
Users on WLFI forums have shared their struggles to retrieve stolen tokens, with reports of some able to recover only a fraction of their assets. The token’s trading kick-started a slew of related fraud, with imitations and phishing links proliferating both on Telegram and X.
