After Three Days on Hotel Wi-Fi, My Crypto Wallet Was Drained
While on vacation, the author connected to an unsecured hotel Wi-Fi network without a password, only a captive portal login. After discussing cryptocurrency topics on a phone call in a shared space, an attacker nearby identified him as a crypto user with a Phantom wallet. The attacker executed a man-in-the-middle attack, injecting malicious code into a webpage the author visited. While using JupiterExchange for a swap, a fraudulent transaction approval request was triggered, disguised as a legitimate platform action. The author approved what appeared to be an authorization or session confirmation—not a direct fund transfer—granting the attacker permission to access his wallet. Days after leaving the hotel, the attacker drained his SOL, tokens, and NFTs. The author lost around $5,000 from a secondary hot wallet, emphasizing mistakes: using public Wi-Fi, discussing crypto in public, and approving transactions without thorough verification. He advises using mobile hotspots, avoiding public crypto discussions, and scrutinizing every wallet request.
marsbit01/09 11:03
