Ethereum Hackers Exploit Create2 Code, Stealing $60M in Six Months
Berita Bitcoin Ethereum Ethereums security is compromised as hackers employ Create2 code to drain wallets undetected. Over $60 million in crypto assets stolen, impacting nearly 100,000 users. “An ingenious yet alarming use of Ethereums features,” reports on-chain investigation team ScamSniffer. Investigation reveals a sophisticated Ethereum wallet drainer exploiting the Create2 code, successfully bypassing security alerts and leading to substantial losses for users. The Mechanics of the Create2 Exploit According to ScamSniffer, hackers have manipulated a piece of Ethereum code, known as Create2, to bypass traditional security measures. Create2, typically used in applications like Uniswap for predicting contract addresses, has become a tool for malicious activities. By creating temporary wallet addresses, these drainers transfer funds unnoticeably after users unknowingly approve malicious signatures. Bypassing Security Protocols The exploitation of Create2 enables hackers to circumvent the usual security alerts that warn users of suspicious activities. This stealth approach has facilitated the unauthorized access to private keys and the subsequent draining of wallets. The signature approval process, often a security checkpoint, is now a vulnerability exploited by these attackers. Impact and Scale of the Exploit Research by ScamSniffer and SlowMist highlights the magnitude of this exploit: approximately $60 million stolen from about 99,000 victims in just six months. A specific group using this method
