MakerDAO delegate loses $11 million in major phishing scam

A MakerDAO governance delegate reportedly lost $11 million in aEthMKR and Pendle USDe tokens after falling victim to a phishing scam.

According to Scam Sniffer, a web3 anti-scam solution, the incident occurred several hours ago when the user inadvertently signed multiple fraudulent Permit network signatures. The victim's wallet, identified as 0xfb…accfa, was compromised by the scammer at the address 0x73…bb96.

Scam Sniffer, which provides solutions to prevent phishing sites and wallet drains, quickly detected the breach. The platform reported the incident on x, revealing that the victim was tricked into signing multiple phishing permissions.

<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter“>

Subsequently, crypto reporter Colin Wu twitter.com/WuBlockchain/status/1804532908604227597″ target=”_blank” rel=””>fixed that Arkham had identified the victim's address in the case as that of a MakerDAO governance delegate, a crucial role within the MakerDAO ecosystem.

Delegates are responsible for voting on governance proposals, governance polls, and executive votes, influencing important decisions within the Maker protocol.

Typically, MKR incumbents and delegates vote on proposals to determine their progression from initial polls to final executive votes. If approved, they are deployed to the Maker protocol after a delay period known as the governance security module (GSM).

What are phishing scams?

Phishing scams occur when attackers pose as legitimate entities to steal sensitive information and gain access to your crypto wallet.

Wallet drainers, a type of malware used in these scams, are often deployed on phishing websites to trick users into signing malicious transactions, resulting in significant financial losses.

According to a Scam Sniffer report published earlier this year, phishing scams siphoned off $300 million from 320,000 users in 2023 alone.

Among the most serious cases in the Scam Sniffer report, a single victim lost $24.05 million due to phishing signatures such as Permission, Permission 2, Approve, and Increase Allocation.

This incident highlights the vulnerabilities that even key figures in the crypto community face.

This alarming trend underscores the importance of vigilance in the crypto community. Users should verify the authenticity of any entity they interact with and be cautious of suspicious activity to protect their assets from phishing attacks.