am I a bad person if I think that people buying the latest hyped NFT deserve to have their 'crypto' drained? NFTs of art images are such an absurdity.
[deleted]
“Crypto drainer” template facilitates theft
41–50 of 228 posts
Re: “Crypto drainer” template facilitates theft
#42am I a bad person if I think that people buying the latest hyped NFT deserve to have their 'crypto' drained? NFTs of art images are such an absurdity.
If you truly believe that? Then yes.
Re: “Crypto drainer” template facilitates theft
#43"Connecting a wallet" makes it vulnerable to Javascript from a web site? Who designed that?
Re: “Crypto drainer” template facilitates theft
#44Earlier quoted context omitted.
Not necessarily a bad person. But to think that people that may not have the education to understand NFTs deserve to be robbed seems to justify to prey on people. NFTs are an absurdity, but millions are spend on advertising them to an unprotected public. That are the real culprits. Scammers do not deserve to get any money, that's for sure.
You don't need to have the education to understand NFTs to have the knowledge not to put bets down on things you don't understand.
Most people don't understand things they invest in/buy.
Most people buying stocks don't understand the company as well as someone who works in the sector.
Most casual art appreciators don't know how to tell if a painting they're buying is a forgery.
Most people buying a house don't know how to assess the foundation, and even if they get a professional assessment, they don't have the same knowledge of the housing market as professionals. Maybe that neighbourhood is slated for rezoning in 5 years that would devalue the property.
Heck, even people buying gold/diamonds get ripped off on fakes/synthetics.
Outside of investments, most people here have probably bought a car. Do people who buy a car deserve to get ripped off if they don't understand how every component works well enough to inspect it themselves?
Re: “Crypto drainer” template facilitates theft
#45So let me get this straight. You just connect your Wallet to a random website and let them run arbitrary smart contracts? That's wild, man. Surely there's gotta be some concern here that someone could take your shit. I'm just surprised there isn't a privacy.com equivalent for this, like a limited-view wallet that lets you create sub-wallets for interaction with various services. Or if there is, perhaps it's not famou…
It's just plain and simple phishing -- the user still has to authorize the transaction, nothing gets stolen just for visiting the site or connecting the wallet.
Not to say it's the user's fault entirely. What they're taking advantage of, is that generally people are less familiar with what to look for in a crypto transaction vs say an online credit card form (and/or wallet UI is worse than a typical stripe checkout)
Re: “Crypto drainer” template facilitates theft
#46Absolutely baffling that the crypto community normalized this process of connecting your wallet to a random website and letting it access all of your money.
I see a lot of victim-blaming suggestions that it's the fault of the person who didn't set up a new crypto wallet for every interaction they might want to make and then transfer enough money into said wallet to cover unpredictable gas fees (while also paying gas fees to transfer the money) and then, presumably pay even more gas fees to transfer everything back out of the wallet if it turns out to not be a scam. It's incredible that crypto has reached a point where some people seem to think this is all totally reasonable and natural to expect the average user to know.
Re: “Crypto drainer” template facilitates theft
#47So let me get this straight. You just connect your Wallet to a random website and let them run arbitrary smart contracts? That's wild, man. Surely there's gotta be some concern here that someone could take your shit. I'm just surprised there isn't a privacy.com equivalent for this, like a limited-view wallet that lets you create sub-wallets for interaction with various services. Or if there is, perhaps it's not famou…
Nothing stops a person making a new wallet with limited assets for interaction with less reputable websites. Web3 culture has made this quite difficult in practice. For example, it's quite normalised to say "new exciting nft project, only available to existing owners of expensive nfts". This sort of thing is considered an ownership perk. And it's why those discord hacks were so damaging, a statement like that was mad…
[deleted]
Re: “Crypto drainer” template facilitates theft
#48"Connecting a wallet" makes it vulnerable to Javascript from a web site? Who designed that?
Have you seen the rest of crypto? It's not very surprising
Re: “Crypto drainer” template facilitates theft
#49Re: “Crypto drainer” template facilitates theft
#50> Victim connects their wallet to “mint”.
It's not clear exactly what's going on here. The word "connect" by itself implies two modes: (1) present public keys; or (2) present private keys. But the loss of property suggests it's (2). If so, then the people falling for this are hopelessly incompetent.
Of course, this has been a problem from the start of Bitcoin. Users "buy" something they have no clue how to secure. They don't understand at all how public key cryptography works, or worse, they bring truly bad mental models from their experience with their online bank or Facebook. Then they get burned. Nothing new here.
It's for this reason that central bank digital currencies are one the the worst ideas ever to come out of central banks. The average person is in no position to even think about managing cryptographic material let alone securing life-changing amounts of money with it. Idiot-proofing CBDC will mean that the central bank just becomes an actual, central, bank. No crypto required. A real one where people actually keep their money. So long to private banks.