In the wild world of crypto, even the biggest players aren't immune to scams. From sophisticated phishing attacks targeting staked Ethereum to whales shifting altcoin investments, it's a jungle out there. Let's break down the latest trends and how to stay safe.

在加密世界中，即使是最大的球員也無法免疫騙局。從針對固定以太坊的精緻網絡釣魚攻擊到轉移山寨幣投資的鯨魚，這是一個叢林。讓我們分解最新趨勢以及如何保持安全。

Whales and Their Staked Ethereum: A Phishing Tale

鯨魚及其湯匙以太坊：網絡釣魚故事

Imagine losing millions in the blink of an eye. That's the reality a crypto whale faced after a recent phishing scheme. According to Scam Sniffer, this unfortunate investor lost over $6 million in staked Ethereum (stETH) and Aave-wrapped Bitcoin (aEthWBTC) on September 18. The attackers used a clever trick: malicious "Permit" signatures disguised as routine wallet confirmations.

想像一下，眨眼間就失去了數百萬。這是在最近的網絡釣魚計劃之後，加密鯨面臨的現實。根據Scam Sniffer的說法，這位不幸的投資者於9月18日損失了超過600萬美元的固定以太坊（Steth）和Aave包裹的比特幣（AETHWBTC）。攻擊者使用了一個聰明的技巧：惡意的“許可”標誌，被偽裝成常規錢包確認。

Yu Xian, founder of SlowMist, pointed out that the victim didn't realize the danger because the transaction didn't require gas fees. It just goes to show, sometimes the most dangerous things come without a price tag!

Slowmist的創始人Yu Xian指出，受害者沒有意識到危險，因為交易不需要汽油費。它只是顯示出來，有時最危險的事情是沒有價格標籤的！

How Permit Exploits Work

允許利用如何工作

Permit approvals were designed to make token transfers easier. Instead of paying fees for on-chain approvals, users could sign an off-chain message authorizing a spender. But this efficiency opened a new door for malicious actors.

許可證批准旨在使令牌傳輸更加容易。用戶可以簽署授權賣出者的鍊鍊信息，而不是為智障人士批准支付費用。但是，這種效率為惡意演員打開了新的門。

Attackers can now combine "Permit" and "TransferFrom" functions to drain assets directly. Because the authorization is off-chain, your wallet won't show anything suspicious until the funds are gone. It's like signing a blank check – you don't know what it's worth until it's cashed!

攻擊者現在可以將“許可證”和“轉移”功能結合起來，直接排出資產。由於授權是鏈接的，因此您的錢包不會在資金消失之前表現出任何可疑的東西。這就像簽署空白支票 - 您不知道它的價值，直到它兌現！

The Rise of Phishing Losses

網絡釣魚損失的興起

This isn't an isolated incident. Phishing campaigns are on the rise. Scam Sniffer reported that in August alone, attackers stole $12.17 million from over 15,200 victims, a 72% jump from July. Big accounts are particularly vulnerable, with three large wallets accounting for nearly half of August's losses.

這不是一個孤立的事件。網絡釣魚活動正在上升。騙局Sniffer報導說，僅在8月，攻擊者就從15,200多名受害者中偷走了1217萬美元，從7月開始增長72％。大帳戶特別脆弱，三個大錢包佔8月損失的近一半。

Security experts are urging crypto users to be extra careful with wallet requests and avoid granting unlimited permissions. Think of it like giving someone the keys to your apartment – you wouldn't give them to just anyone, would you?

安全專家敦促加密用戶對錢包請求格外小心，並避免授予無限的權限。想想它就像給某人給您的公寓鑰匙 - 您不會只給任何人，對嗎？

Whales Shifting Altcoin Focus

鯨魚轉移山寨幣的重點

Beyond the scams, crypto whales are also making moves in the altcoin market. Following the Federal Reserve's recent rate cut, whales have been quietly building positions in select tokens. Lower interest rates often drive investors to yield-focused platforms, and whales are taking notice.

除了騙局之外，加密鯨也在Altcoin市場中採取行動。在美聯儲最近降低的稅率之後，鯨魚一直在精選令牌中悄悄地建立位置。較低的利率通常會驅使投資者進入以屈服為中心的平台，並且鯨魚正在註意。

Tokens like EigenCloud (EIGEN), Avantis (AVNT), and Kamino Finance (KMNO) have seen significant whale activity. These platforms offer unique opportunities, but as always, it's crucial to do your own research and understand the risks.

像Eigencloud（Eigen），Avantis（Avnt）和Kamino Finance（KMNO）這樣的代幣具有顯著的鯨魚活動。這些平台提供了獨特的機會，但是與往常一樣，進行自己的研究並了解風險至關重要。

Staying Safe in the Crypto Jungle

在加密叢林中保持安全

So, what can you do to protect yourself? Here are a few tips:

那麼，您該怎麼做才能保護自己？這裡有一些提示：

• Be wary of unexpected wallet requests: Always double-check before signing anything.
• Limit permissions: Don't grant unlimited access to your wallet.
• Stay informed: Keep up with the latest scams and security threats.
• Do your own research: Before investing in any token, understand the risks involved.

Final Thoughts

最後的想法

The world of crypto can be a wild ride, but with a little caution and knowledge, you can navigate it safely. Remember, even the whales get caught in the net sometimes. So, stay vigilant, stay informed, and keep those crypto waters safe!

加密世界可能是一個瘋狂的旅程，但是要謹慎和知識，您可以安全地瀏覽它。請記住，有時甚至將鯨魚捕獲在網中。因此，請保持警惕，保持知情並確保這些加密水域安全！