Artículos Relacionados con Honeypot

El Centro de Noticias de HTX ofrece los artículos más recientes y un análisis profundo sobre "Honeypot", cubriendo tendencias del mercado, actualizaciones de proyectos, desarrollos tecnológicos y políticas regulatorias en la industria de cripto.

How to spot a crypto scam or a rug pull?

Rug pulls typically begin with seemingly legitimate projects exhibiting rising prices and active communities, but end with developers withdrawing liquidity. These scams often involve manufacturing trust through locked liquidity and renounced contracts, then creating hype on social media. The process from hype to exit can occur in 48-72 hours. There are "hard" rug pulls involving immediate liquidity drainage and "soft" ones that gradually erode value through insider selling or abandoned development. Key warning signs include high wallet concentration (e.g., top 5-10 holders controlling over 30% of supply), lack of vesting for developer allocations, and quickly expiring liquidity locks. Smart contract risks stem from unverified code, hidden mint functions, upgradeable contracts, and sell restrictions. Market behavior red flags are rapid price surges driven by influencer promotion, low organic trading volume, and slowing holder growth before large developer withdrawals. Common exploit types are honeypots (trapping investors by blocking sells, accounting for ~98k scam tokens), hidden mint functions (~61k cases allowing post-launch supply inflation), and fake ownership renunciations (~49k cases). Ultimately, genuine decentralization is determined by developers relinquishing control through transparent vesting, verified code, and third-party audits.

ambcrypto07/21 00:02

How to spot a crypto scam or a rug pull?

ambcrypto07/21 00:02

Loss Exceeds $7.5 Million: Analysis of the Honeypot Attack Targeting MEV Bot and Tracking of Stolen Funds

On June 21, Jaredfromsubway.eth, one of Ethereum's most active MEV bots, suffered a sophisticated honeypot attack, losing over $7.5 million in crypto assets. Attackers deployed a complex contract system, including a coordinator, trigger, and fake token/pair contracts, to exploit the bot's arbitrage logic. The core attack trick involved baiting the bot with transactions: small trades appeared normal and consumed token approvals, while larger trades preserved these approvals by using fake swaps. This left the bot with large, unused approvals for assets like USDC, USDT, and WETH. The attacker then drained these approvals in a final step. The stolen funds—$2.87M USDC, $2.04M USDT, and 1,474 WETH—were consolidated and partially laundered through Tornado Cash. This incident highlights that MEV bots must not rely solely on simulated profits for security. Extra caution is required with unfamiliar contracts or custom wrappers in arbitrage paths, and post-transaction allowance checks are strongly recommended.

marsbit06/22 08:30

Loss Exceeds $7.5 Million: Analysis of the Honeypot Attack Targeting MEV Bot and Tracking of Stolen Funds

marsbit06/22 08:30

Hunter Becomes the Hunted: The Most Profitable MEV Bot Gets Hacked

The prominent Ethereum MEV bot address Jaredfromsubway.eth suffered a targeted on-chain attack, losing over $7.5 million. The incident was identified as a "counter-MEV honeypot attack," where the attacker deployed numerous fake token contracts and liquidity pools over several weeks, mimicking mainstream assets like WETH and USDC to create seemingly profitable arbitrage opportunities. The MEV bot, designed to automatically detect and execute such trades, interacted with the malicious setup. During the process, it granted approvals to attacker-controlled contracts, which were not promptly revoked. The attacker later exploited these persistent permissions in a single transaction, draining the bot's holdings of ETH, USDC, and USDT. Jaredfromsubway.eth is known as one of Ethereum's most active and profitable MEV bots, primarily executing "sandwich attacks" to extract value from user transactions. Its operations have been linked to a majority of such attacks on the network. This event highlights the evolving security threats in crypto, demonstrating that even sophisticated, rule-exploiting systems can become targets of carefully designed behavioral traps. Following the theft, an impersonator account on X falsely claimed to offer a bounty for the return of the funds, prompting warnings from developers.

Odaily星球日报06/21 09:15

Hunter Becomes the Hunted: The Most Profitable MEV Bot Gets Hacked

Odaily星球日报06/21 09:15

The Quantum Computing Threat to Bitcoin

Bitcoin faces an existential threat from quantum computing, which could break the elliptic curve digital signature algorithm (ECDSA) securing the network. Approximately 25% of all bitcoin—including the 1.1 million BTC in Satoshi’s wallet—are stored in vulnerable early "pay-to-public-key" addresses, where public keys are exposed on the ledger. Later address types only reveal public keys during transactions, creating a brief attack window. The timeline for quantum computing is uncertain, but if it emerges before Bitcoin transitions to post-quantum cryptography (PQC), attackers could steal and liquidate billions in bitcoin, causing a market collapse. A coordinated migration to quantum-resistant algorithms is urgently needed, though implementing PQC could take 6 months to 2 years. A controversial proposal suggests "burning" un-migrated coins to prevent mass theft, but this risks setting a precedent for confiscation and contradicts Bitcoin’s core principles of individual sovereignty. As the largest financial "honeypot" with direct and liquid value, Bitcoin is a prime target. The network must proactively upgrade before quantum computers become capable of breaking current encryption.

marsbit02/02 12:13