Security Firm Exposes Tactics Behind Fake Deposit Attacks on Exchanges
Tech Inilantad ng Security Firm ang Mga Taktika sa Likod ng Mga Pekeng Pag-atake sa Deposito sa Mga Palitan Balita ng Ethereum ng Bitcoin Security firm SlowMist reveals the alarming rise of fake deposit attacks targeting crypto exchanges. Attackers exploit system errors to deceive exchanges, obtaining crypto for free. The tactics include fabricating events, zero confirmation, and fake coins. In a recent blog, blockchain security firm SlowMist revealed the alarming prevalence of fake deposit attacks targeting crypto exchanges. These attacks exploit system errors in exchanges deposit operations, allowing attackers to deceive the exchanges into crediting digital assets to their accounts without any actual payment. The security firm outlined the typical deposit process in exchanges and noted that the decentralized architecture of blockchain prevents security measures from blocking such malicious transactions from scammers. SlowMist clarifies that fake deposit attacks are not inherent blockchain vulnerabilities; instead, attackers exploit specific blockchain characteristics to create deceptive transactions. SlowMists security team identified 12 common attack tactics. These include the “Zero Confirmation” technique, where the deposit transaction is credited before being included in a block, allowing attackers to invalidate it. Another method is the “Fake Coins” attack, where the exchange credits users without distinguishing the type of deposited assets, leading to account credit errors. Also, SlowMist noted
