Public Wi-Fi and a Phone Call: How They Became the Perfect Trap to Steal $5000 in Crypto Assets?

比推Pubblicato 2026-01-09Pubblicato ultima volta 2026-01-09

Introduzione

An individual lost approximately $5,000 in cryptocurrency assets after connecting to a public hotel Wi-Fi network during a vacation. The attack began when the victim was overheard discussing crypto and using a Phantom wallet in a public area, making them a target. While browsing on the unsecured Wi-Fi, the attacker executed a man-in-the-middle attack, injecting malicious code into a seemingly legitimate webpage. The victim was using Jupiter Exchange to swap tokens when a fraudulent transaction approval request was triggered, disguised as a normal operation. Instead of a direct fund transfer, the request asked for “authorization” or “session approval,” granting the attacker permission to act on the wallet. The victim approved, believing it was part of the Jupiter transaction. The attacker waited until the victim left the hotel to drain the wallet of SOL, tokens, and NFTs. Key mistakes included: using public Wi-Fi instead of a mobile hotspot, discussing crypto in public, and approving a transaction without thorough verification. The wallet was a secondary hot wallet, not the main storage, preventing greater losses. The incident highlights the risks of public networks and the importance of transaction scrutiny.

Author: The Smart Ape

Compiled by: Deep Tide TechFlow

Original title: After Three Days on Hotel Wi-Fi, My Crypto Wallet Was Drained of $5000

A few days ago, I went with my family to a very nice hotel for a year-end holiday. One day after leaving the hotel, my wallet was completely emptied. I was puzzled, as I had neither clicked on any phishing links nor signed any malicious transactions.

After hours of investigation and seeking help from experts, I finally figured out the truth. It turned out to be due to the hotel's Wi-Fi network, a brief phone call, and a series of foolish mistakes.

Like most cryptocurrency enthusiasts, I brought my laptop with me, thinking I could squeeze in some work while on vacation with my family. My wife repeatedly insisted that I not work during these three days—I really should have listened to her.

Like other guests, I connected to the hotel's Wi-Fi network. This network didn't require a password; it only needed to be logged in through a captive portal.

I worked as usual in the hotel without doing anything risky: I didn't create new wallets, click on strange links, or access suspicious decentralized applications (dApps). I just checked X (Twitter), my balances, Discord, Telegram, etc.

At one point, I received a call from a crypto friend, and we chatted about market trends, Bitcoin, and other cryptocurrency-related matters. But what I didn't know was that someone nearby was eavesdropping on our conversation and realized I was involved in cryptocurrency. This was my first mistake. The eavesdropper learned from our conversation that I was using a Phantom wallet and that I was a user with a significant holding.

This made me his target.

In a public Wi-Fi network, all devices share the same network, and the visibility between devices is actually higher than you might think. There is almost no real protection between users, which creates an opportunity for a "Man-in-the-Middle Attack." The attacker acts like a middleman, quietly inserting themselves between you and the internet, much like someone secretly reading and tampering with your mail before it reaches you.

While I was browsing the web on the hotel Wi-Fi, one website appeared to load normally, but in reality, malicious code had been injected behind the page. I didn't notice anything unusual at the time. If I had installed some security tools, I might have detected these issues, but unfortunately, I hadn't.

Normally, a website might request your wallet to sign certain operations. The Phantom wallet would pop up a window where you could choose to approve or reject. Generally, you would trust the website and browser and sign without worry. However, that day, I shouldn't have.

Just as I was performing a token swap on @JupiterExchange, the malicious code triggered a wallet request that replaced my normal swap operation. I could have detected it as a malicious request by carefully checking the transaction details, but because I was already performing a swap on Jupiter, I didn't suspect a thing.

That day, I didn't sign any transaction to transfer funds; instead, I signed an authorization. This was exactly why my assets were stolen days later.

The malicious code didn't directly ask me to send SOL (Solana), as that would have been too obvious. Instead, it requested me to "authorize access," "approve account," or "confirm session." In simple terms, I was actually giving another address permission to operate on my behalf.

I approved it because I mistakenly thought it was related to my operation on Jupiter. At the time, the message popped up by the Phantom wallet looked technical, didn't show any amount, and didn't prompt for an immediate transfer.

And that was all the attacker needed. He patiently waited until I left the hotel before taking action. He transferred my SOL, withdrew my tokens, and moved my NFTs to another address.

I never thought something like this would happen to me. Fortunately, this wasn't my main wallet but a hot wallet used for specific operations, not for long-term asset holding. Even so, I made many mistakes, and I believe I am primarily responsible.

First, I should never have connected to the hotel's public Wi-Fi. I should have used my phone's hotspot instead.

My second mistake was talking about cryptocurrency in the hotel's public area, where many people could have overheard our conversation. My father once warned me never to let others know you're involved in cryptocurrency. This time, I was lucky; some people have even faced kidnapping or worse because of their crypto assets.

Another mistake was approving the wallet request without paying full attention. Because I was sure the request came from Jupiter, I didn't analyze it carefully. In fact, every wallet request should be carefully reviewed, even on trusted applications. Requests can be intercepted and may not actually come from the app you think.

In the end, I lost about $5000 from a secondary wallet. While it's not the worst-case scenario, it's still very frustrating.

Twitter:https://twitter.com/BitpushNewsCN

BitPush TG Discussion Group:https://t.me/BitPushCommunity

BitPush TG Subscription: https://t.me/bitpush

Original article link:https://www.bitpush.news/articles/7601380

Domande pertinenti

QWhat was the primary method the attacker used to compromise the victim's crypto wallet?

AThe attacker used a Man-in-the-Middle (MitM) attack by exploiting the insecure public hotel Wi-Fi network. They intercepted the victim's web traffic and injected malicious code into a webpage, which triggered a deceptive wallet authorization request.

QWhat specific mistake did the victim make that allowed the attacker to identify him as a target?

AThe victim discussed cryptocurrency, his use of the Phantom wallet, and his substantial holdings during a phone call in a public area of the hotel, which was overheard by the attacker.

QWhat type of transaction did the victim accidentally sign, instead of a direct fund transfer?

AThe victim signed an authorization or approval request, which granted permission for another address to operate on their behalf. This did not immediately transfer funds but gave the attacker the ability to do so later.

QWhy didn't the victim suspect the malicious transaction request when it appeared?

AThe request appeared while he was performing a legitimate token swap on the Jupiter Exchange platform. He assumed the request was part of that normal operation and did not carefully inspect the technical details of the transaction, which showed no immediate transfer of funds.

QWhat were the two security precautions the victim identified that could have prevented this attack?

AFirst, he should not have used the hotel's public Wi-Fi and instead used his phone's mobile hotspot. Second, he should never have discussed his cryptocurrency activities in a public space where he could be overheard.

Letture associate

The 'Chip' Challenge and Breakthroughs in China's Optical Industry Chain

China's Photonics Industry: Bottlenecks and Breakthroughs In the global AI race, computing chips dominate the narrative, but the underlying bottleneck increasingly defining the scale of AI clusters is light—or more specifically, optical connectivity. Optical modules, which translate electrical signals to light and vice versa, are crucial for connecting thousands of GPUs in AI data centers, preventing data congestion and ensuring efficient model training. High-speed modules (800G, 1.6T) are now standard, with performance hinging on advanced DSP (Digital Signal Processor) chips. This is where a critical dependency lies. Two US giants—Marvell and Broadcom—collectively dominate over 90% of the high-end DSP chip market. Chinese optical module leaders like Zhongji Innolight and Eoptolink rely on these chips to manufacture modules for overseas AI customers, primarily in North America. While this creates a supply chain vulnerability, complete decoupling is difficult. Marvell derives over half its revenue from Greater China, and the US firms depend on Chinese partners for chip packaging and optical components. The risk from laser chips (e.g., from Lumentum), another key component, is considered more manageable due to multiple global suppliers and faster progress in domestic alternatives from companies like YOFC and Accelink. To mitigate risks, China's industry is pursuing a multi-pronged strategy: diversifying supply chains and locking in long-term orders; fostering a domestic market ecosystem to adopt homegrown DSPs from firms like Huawei HiSilicon and CETC; accelerating R&D in high-speed DSPs and advanced packaging; and investing in next-gen technologies like silicon photonics and Co-Packaged Optics (CPO) to reduce reliance on discrete DSPs. The ultimate solution lies not in short-term博弈 but in persistent advancement of domestic high-end chip R&D and manufacturing. While challenges remain in performance, certification, and ecosystem building, China's vast domestic market and manufacturing base provide a crucial buffer, buying time for the industry to achieve greater technological independence.

marsbit11 min fa

The 'Chip' Challenge and Breakthroughs in China's Optical Industry Chain

marsbit11 min fa

Behind SpaceX's $2 Trillion Market Cap: Why Does Musk Always Have the Next Move Planned?

On June 12th, SpaceX debuted on the Nasdaq, reaching a valuation that briefly touched $2 trillion. This marked the culmination of a 24-year journey from its founding in 2002, driven by Elon Musk's frustration at the high cost of buying rockets. The company's path was defined by early failures, with its first three Falcon 1 launches ending in explosions before a successful 2008 flight opened the era of commercial spaceflight. Key to its model was a fixed-price NASA contract, incentivizing cost reduction. SpaceX mastered rocket reusability, first achieving a Falcon 9 landing in 2015, which drastically cut launch costs. This enabled its profitable Starlink satellite internet constellation, envisioned years before reusability was proven, to create an internal market for frequent launches. Similarly, the next-generation Starship rocket was in development long before its first flight, with its business case evolving from Mars colonization to supporting the emerging concept of in-orbit data centers for AI—a story now central to its valuation. The company's recent IPO, a reversal of its long-standing "no IPO" stance, is funding this ambitious "space-based compute" vision. While major tech players like Google, Blue Origin, and others are investing heavily, significant technical and cost hurdles remain. Ultimately, SpaceX's history is one of creating its own demand: first with Starlink and now with space-based AI compute, betting that its next rocket will enable its next giant market.

marsbit14 min fa

Behind SpaceX's $2 Trillion Market Cap: Why Does Musk Always Have the Next Move Planned?

marsbit14 min fa

USDe Circumvents GENIUS Act Yield Ban: How Synthetic Dollars Became Crypto's Most Successful Gray Area?

In drafting the GENIUS Act, Congress prohibited licensed payment stablecoin issuers from paying interest or yield to holders—a rule that forced changes for USDC. However, Ethena's USDe, a rapidly growing "yield dollar," operates outside this regulation. USDe is a delta-neutral synthetic dollar backed by crypto collateral and hedged perpetual futures positions, generating yield from funding rates rather than traditional reserves. Because it doesn't fit the legal definition of a payment stablecoin, the GENIUS Act's restrictions do not apply. USDe's supply peaked above $14 billion in 2025, making it a top-three dollar-denominated crypto asset. Its model carries distinct risks, notably dependence on sustained positive funding rates and vulnerability during market deleveraging events, as seen in a brief depeg in October 2025. Regulatory approaches differ: Germany's BaFin banned USDe sales, viewing it as an unregistered security, while U.S. institutional capital, like Janus Henderson, has embraced it for treasury management. The GENIUS Act defined and regulated payment stablecoins but left synthetic dollars like USDe in a gray area. The unresolved question is whether future regulations will address this category or if yield will continue migrating to undefined spaces.

marsbit16 min fa

USDe Circumvents GENIUS Act Yield Ban: How Synthetic Dollars Became Crypto's Most Successful Gray Area?

marsbit16 min fa

When Crypto Meets the World Cup: CoinW and Modrić's Art of "Navigating Cycles"

When Encryption Meets the World Cup: CoinW and Modrić's "Transcending Cycles" Philosophy In the context of the 2026 FIFA World Cup and its massive global audience, the crypto exchange CoinW announced football legend Luka Modrić as its global brand ambassador. This move is framed not merely as a marketing tactic, but as a strategic experiment in user profile migration. It targets mature, financially stable football fans—particularly in Europe, Southeast Asia, and Latin America—who traditionally have low crypto awareness but value trusted, time-tested authority figures like Modrić. The article draws parallels between Modrić's enduring, disciplined career—marked by consistency and success at the highest level over two decades—and CoinW's own development path. Founded in 2017 during a volatile industry period, CoinW focused on building robust infrastructure and risk management. It weathered the 2022 industry crisis without major security incidents, subsequently earning recognition like "Europe's Most Trusted Exchange" and growing to over 20 million registered users. This "long-termism" is translated into user-centric products. CoinW Academy lowers the initial knowledge barrier. Its integrated ecosystem (CoinW, GemW, DeriW, PropW) and the recent launch of a TradFi section—offering perpetual contracts on traditional assets like stocks, gold, and oil—aim to create a unified platform for diverse assets. For the World Cup, CoinW launched the "We Are The Game" campaign, collaborating with Alchemy Pay to offer zero-fee deposits and local payment options, aiming to transform spectators into participants and lower entry barriers. Ultimately, CoinW's sports partnerships and product strategy are presented as a concerted effort to build trust and accessibility for the "silent majority" still outside crypto—shifting the industry narrative toward inclusivity and long-term value.

Foresight News20 min fa

When Crypto Meets the World Cup: CoinW and Modrić's Art of "Navigating Cycles"

Foresight News20 min fa

A Panoramic View of the Solana Privacy Ecosystem: The Complete Privacy Stack from Computation to AI

**Solana Privacy Ecosystem: A Comprehensive Overview from Computation to AI** Solana's privacy ecosystem, while nascent, is rapidly evolving to address key challenges across multiple layers. Key figures like Helius CEO Mert acknowledge that Solana has lagged in privacy but highlight its unique potential for scalable, composable privacy protocols, potentially leveraging technologies like ZK compression without persistent rollups. The foundational layer is **Private Compute**, addressed by providers like Arcium and Magic Block. Arcium utilizes Multi-Party Computation (MPC) networks to process encrypted data off-chain with final settlement on Solana, supporting use cases like confidential payments (via its C-SPL token standard) and encrypted data analysis. Magic Block employs Trusted Execution Environments (TEEs) to create private, ephemeral rollups, offering confidentiality, scalability, and composability. Both enable private order books, dark pools, and DeFi rails. Building on this infrastructure are applications for **Private Transfers and Balances**. Umbra, built on Arcium, offers encrypted token accounts with amount, balance, and sender-receiver linkage privacy, plus compliance features. Privacy Cash uses Tornado-style shielded pools for SOL, while Hush provides private staking and trading with integrated swaps via Jupiter. To eliminate **On-Chain Trails** from everyday activities like trading, protocols like encifherio and VanishTrade are emerging. encifherio privately routes swaps through Jupiter by encrypting transaction details within TEEs. VanishTrade routes trades through shielded liquidity pools. Darklake offers a ZK-native "blind slippage" AMM and private perpetuals to hide trading intent and prevent front-running. More advanced applications include **Private Prediction Markets**. Platforms like Melee Markets use Arcium's MPC to encrypt order books, allowing participants to place hidden bets without revealing their market position until settlement. Finally, the ecosystem is expanding into **Private AI**. Loyal leverages both Magic Block and Arcium to create a decentralized protocol where user-AI interactions, queries, and preferences are encrypted on-chain, giving users ownership and control over their data while enabling private transactions and yield generation. In summary, Solana's privacy stack is developing from core compute and transfer privacy towards sophisticated applications in DeFi, prediction markets, and AI, aiming for a future where Fully Homomorphic Encryption (FHE) and Zero-Knowledge (ZK) proofs combine for a complete privacy solution.

marsbit21 min fa

A Panoramic View of the Solana Privacy Ecosystem: The Complete Privacy Stack from Computation to AI

marsbit21 min fa

Trading

Spot

Futures

Articoli Popolari

Cosa è APECOIN

Comprendere la Moneta Elettronica dell'Asia Pacifico ($APECoin) In un'era in cui l'intersezione tra tecnologia e ambientalismo sta diventando sempre più critica, le criptovalute stanno lasciando il segno come potenziali catalizzatori di cambiamento. Tra queste innovazioni, la Moneta Elettronica dell'Asia Pacifico ($APECoin) si distingue come un progetto unico progettato per sostenere iniziative ambientali nella regione dell'Asia Pacifico. Questo articolo approfondisce le fondamenta, le caratteristiche uniche e l'impatto di $APECoin all'interno del più ampio panorama della blockchain. Cos'è la Moneta Elettronica dell'Asia Pacifico ($APECoin)? La Moneta Elettronica dell'Asia Pacifico ($APECoin) è un token ERC20 e TRC20, realizzato ad aprile 2020 dopo la sua concettualizzazione a dicembre 2019. Questa innovazione è nata dal desiderio di promuovere pratiche ecologiche e sostenere una serie di progetti ambientali volti alla sostenibilità e alle iniziative verdi. Obiettivi e Scopi $APECoin non è semplicemente una valuta digitale; è concepita come un mezzo di scambio che consente agli utenti di partecipare a transazioni che beneficiano direttamente cause ambientali. Il suo ecosistema è progettato per facilitare varie attività finanziarie mentre promuove l'adozione di pratiche ecologiche. La valuta mira principalmente a: Supportare Iniziative Ambientali: Attraverso ogni transazione, una parte è destinata al finanziamento di progetti sostenibili volti alla conservazione e all'energia rinnovabile. Promuovere Innovazioni Eco-Friendly: Incoraggiare startup e progetti che si allineano con la sostenibilità ambientale attraverso l'uso del suo token come mezzo di valore. Creare un Mercato Sostenibile: La piattaforma include un'e-marketplace dove possono avvenire transazioni finanziarie all'interno di un framework dedicato alla promozione di pratiche verdi. Creatore della Moneta Elettronica dell'Asia Pacifico ($APECoin) Sebbene i dettagli riguardanti il creatore individuale di $APECoin non siano divulgati pubblicamente, il progetto è sostenuto in modo significativo dal Gruppo APEC, un consorzio focalizzato sulla difesa di iniziative ambientali. Questo sostegno aggiunge credibilità e significato al progetto, collegandolo a una rete più ampia impegnata nella sostenibilità e nelle pratiche ecologiche. Investitori della Moneta Elettronica dell'Asia Pacifico ($APECoin) Il panorama degli investimenti che circonda $APECoin rimane in gran parte non divulgato. I nomi specifici di fondazioni o organizzazioni di investimento che supportano questa criptovaluta non sono stati ancora rivelati. Tuttavia, ciò che è evidente è un crescente interesse tra gli investitori desiderosi di sostenere progetti sostenibili che dimostrano potenziale impatto nel mondo delle criptovalute. Come funziona la Moneta Elettronica dell'Asia Pacifico ($APECoin)? $APECoin si distingue per il suo innovativo modello operativo, che sfrutta la tecnologia blockchain e i contratti intelligenti. Questa combinazione non solo garantisce efficienza nelle transazioni, ma assicura anche il rispetto dei framework normativi, migliorando la sicurezza e la trasparenza delle transazioni. Caratteristiche Uniche di $APECoin Operazioni Basate su Blockchain: Stabilendo le sue operazioni su una piattaforma blockchain, $APECoin garantisce che tutte le transazioni siano immutabili e protette tramite tecniche crittografiche avanzate. Questa decentralizzazione sottolinea l'integrità del token all'interno del suo ecosistema. Contratti Intelligenti: $APECoin impiega contratti intelligenti che facilitano transazioni senza soluzione di continuità mentre garantiscono conformità alle normative applicabili. Questi accordi automatizzati riducono la possibilità di dispute, semplificano i processi e contribuiscono a un framework di transazione affidabile. E-Marketplace: Una delle caratteristiche distintive di $APECoin è il suo e-marketplace dedicato. Questo ambiente digitale funge da hub per servizi che promuovono pratiche ecologiche, fornendo una piattaforma per scambi che avanzano la visione verde del progetto. Attraverso queste attribuzioni, $APECoin si ritaglia una nicchia all'interno dell'ampio mercato delle criptovalute, sposando efficacemente i principi della blockchain con la responsabilità ambientale. Cronologia della Moneta Elettronica dell'Asia Pacifico ($APECoin) Comprendere la traiettoria di $APECoin fornisce un'idea delle sue pietre miliari di sviluppo e delle aspirazioni future. Ecco una cronologia che evidenzia eventi significativi nella storia del progetto: Dicembre 2019: Concettualizzazione della Moneta Elettronica dell'Asia Pacifico, iniziata con l'ambizione di promuovere la sostenibilità attraverso la criptovaluta. Aprile 2020: Lancio ufficiale di $APECoin, segnando il suo ingresso nel mercato come token dedicato ai progetti ambientali. 2020-2021: Conduzione dell'Offerta Iniziale di Scambio (IEO), che consente agli utenti di acquistare $APECoin, insieme alla registrazione su varie piattaforme di scambio elettronico per migliorarne l'accessibilità. Nel suo relativamente breve viaggio, $APECoin ha fatto significativi progressi nel gettare le basi per una criptovaluta sicura e di impatto guidata da obiettivi ambientali. Conclusione La Moneta Elettronica dell'Asia Pacifico ($APECoin) incarna il matrimonio tra tecnologia e responsabilità ambientale, promuovendo la crescita nell'ecosistema crypto mentre sostiene la sostenibilità. Con la sua struttura unica, il sostegno da parte di enti rinomati e una visione per un futuro più verde, $APECoin è più di una semplice criptovaluta; è un progetto pionieristico volto a nutrire l'innovazione responsabile nella regione dell'Asia Pacifico. Attraverso il suo impegno per l'inclusione finanziaria e il supporto delle iniziative ambientali, si presenta come un esempio formidabile di come le valute digitali possano essere utilizzate per un impatto sociale positivo. Mentre il progetto continua a evolversi, gli stakeholder all'interno della comunità crypto e oltre osserveranno con interesse come $APECoin plasmi la conversazione sulle pratiche sostenibili nel crescente mondo delle criptovalute.

49 Totale visualizzazioniPubblicato il 2024.12.03Aggiornato il 2024.12.03

Come comprare APE

Benvenuto in HTX.com! Abbiamo reso l'acquisto di ApeCoin (APE) semplice e conveniente. Segui la nostra guida passo passo per intraprendere il tuo viaggio nel mondo delle criptovalute.Step 1: Crea il tuo Account HTXUsa la tua email o numero di telefono per registrarti il tuo account gratuito su HTX. Vivi un'esperienza facile e sblocca tutte le funzionalità,Crea il mio accountStep 2: Vai in Acquista crypto e seleziona il tuo metodo di pagamentoCarta di credito/debito: utilizza la tua Visa o Mastercard per acquistare immediatamente ApeCoinAPE.Bilancio: Usa i fondi dal bilancio del tuo account HTX per fare trading senza problemi.Terze parti: abbiamo aggiunto metodi di pagamento molto utilizzati come Google Pay e Apple Pay per maggiore comodità.P2P: Fai trading direttamente con altri utenti HTX.Over-the-Counter (OTC): Offriamo servizi su misura e tassi di cambio competitivi per i trader.Step 3: Conserva ApeCoin (APE)Dopo aver acquistato ApeCoin (APE), conserva nel tuo account HTX. In alternativa, puoi inviare tramite trasferimento blockchain o scambiare per altre criptovalute.Step 4: Scambia ApeCoin (APE)Scambia facilmente ApeCoin (APE) nel mercato spot di HTX. Accedi al tuo account, seleziona la tua coppia di trading, esegui le tue operazioni e monitora in tempo reale. Offriamo un'esperienza user-friendly sia per chi ha appena iniziato che per i trader più esperti.

91 Totale visualizzazioniPubblicato il 2025.02.24Aggiornato il 2026.06.02

Discussioni

Benvenuto nella Community HTX. Qui puoi rimanere informato sugli ultimi sviluppi della piattaforma e accedere ad approfondimenti esperti sul mercato. Le opinioni degli utenti sul prezzo di APE APE sono presentate come di seguito.