In the wild world of crypto, even the biggest players aren't immune to scams. From sophisticated phishing attacks targeting staked Ethereum to whales shifting altcoin investments, it's a jungle out there. Let's break down the latest trends and how to stay safe.

在加密世界中，即使是最大的球员也无法免疫骗局。从针对固定以太坊的精致网络钓鱼攻击到转移山寨币投资的鲸鱼，这是一个丛林。让我们分解最新趋势以及如何保持安全。

Whales and Their Staked Ethereum: A Phishing Tale

鲸鱼及其汤匙以太坊：网络钓鱼故事

Imagine losing millions in the blink of an eye. That's the reality a crypto whale faced after a recent phishing scheme. According to Scam Sniffer, this unfortunate investor lost over $6 million in staked Ethereum (stETH) and Aave-wrapped Bitcoin (aEthWBTC) on September 18. The attackers used a clever trick: malicious "Permit" signatures disguised as routine wallet confirmations.

想象一下，眨眼间就失去了数百万。这是在最近的网络钓鱼计划之后，加密鲸面临的现实。根据Scam Sniffer的说法，这位不幸的投资者于9月18日损失了超过600万美元的固定以太坊（Steth）和Aave包裹的比特币（AETHWBTC）。攻击者使用了一个聪明的技巧：恶意的“许可”标志，被伪装成常规钱包确认。

Yu Xian, founder of SlowMist, pointed out that the victim didn't realize the danger because the transaction didn't require gas fees. It just goes to show, sometimes the most dangerous things come without a price tag!

Slowmist的创始人Yu Xian指出，受害者没有意识到危险，因为交易不需要汽油费。它只是显示出来，有时最危险的事情是没有价格标签的！

How Permit Exploits Work

允许利用如何工作

Permit approvals were designed to make token transfers easier. Instead of paying fees for on-chain approvals, users could sign an off-chain message authorizing a spender. But this efficiency opened a new door for malicious actors.

许可证批准旨在使令牌传输更加容易。用户可以签署授权卖出者的链链信息，而不是为智障人士批准支付费用。但是，这种效率为恶意演员打开了新的门。

Attackers can now combine "Permit" and "TransferFrom" functions to drain assets directly. Because the authorization is off-chain, your wallet won't show anything suspicious until the funds are gone. It's like signing a blank check – you don't know what it's worth until it's cashed!

攻击者现在可以将“许可证”和“转移”功能结合起来，直接排出资产。由于授权是链接的，因此您的钱包不会在资金消失之前表现出任何可疑的东西。这就像签署空白支票 - 您不知道它的价值，直到它兑现！

The Rise of Phishing Losses

网络钓鱼损失的兴起

This isn't an isolated incident. Phishing campaigns are on the rise. Scam Sniffer reported that in August alone, attackers stole $12.17 million from over 15,200 victims, a 72% jump from July. Big accounts are particularly vulnerable, with three large wallets accounting for nearly half of August's losses.

这不是一个孤立的事件。网络钓鱼活动正在上升。骗局Sniffer报道说，仅在8月，攻击者就从15,200多名受害者中偷走了1217万美元，从7月开始增长72％。大帐户特别脆弱，三个大钱包占8月损失的近一半。

Security experts are urging crypto users to be extra careful with wallet requests and avoid granting unlimited permissions. Think of it like giving someone the keys to your apartment – you wouldn't give them to just anyone, would you?

安全专家敦促加密用户对钱包请求格外小心，并避免授予无限的权限。想想它就像给某人给您的公寓钥匙 - 您不会只给任何人，对吗？

Whales Shifting Altcoin Focus

鲸鱼转移山寨币的重点

Beyond the scams, crypto whales are also making moves in the altcoin market. Following the Federal Reserve's recent rate cut, whales have been quietly building positions in select tokens. Lower interest rates often drive investors to yield-focused platforms, and whales are taking notice.

除了骗局之外，加密鲸也在Altcoin市场中采取行动。在美联储最近降低的税率之后，鲸鱼一直在精选令牌中悄悄地建立位置。较低的利率通常会驱使投资者进入以屈服为中心的平台，并且鲸鱼正在注意。

Tokens like EigenCloud (EIGEN), Avantis (AVNT), and Kamino Finance (KMNO) have seen significant whale activity. These platforms offer unique opportunities, but as always, it's crucial to do your own research and understand the risks.

像Eigencloud（Eigen），Avantis（Avnt）和Kamino Finance（KMNO）这样的代币具有显着的鲸鱼活动。这些平台提供了独特的机会，但是与往常一样，进行自己的研究并了解风险至关重要。

Staying Safe in the Crypto Jungle

在加密丛林中保持安全

So, what can you do to protect yourself? Here are a few tips:

那么，您该怎么做才能保护自己？这里有一些提示：

• Be wary of unexpected wallet requests: Always double-check before signing anything.
• Limit permissions: Don't grant unlimited access to your wallet.
• Stay informed: Keep up with the latest scams and security threats.
• Do your own research: Before investing in any token, understand the risks involved.

Final Thoughts

最后的想法

The world of crypto can be a wild ride, but with a little caution and knowledge, you can navigate it safely. Remember, even the whales get caught in the net sometimes. So, stay vigilant, stay informed, and keep those crypto waters safe!

加密世界可能是一个疯狂的旅程，但是要谨慎和知识，您可以安全地浏览它。请记住，有时甚至将鲸鱼捕获在网中。因此，请保持警惕，保持知情并确保这些加密水域安全！