Robinhood Chain Sees 'Disappearing Token' Scam: Tokens Vanish After Purchase, Private Keys Secure But Funds Evaporate

marsbitОпубліковано о 2026-07-14Востаннє оновлено о 2026-07-14

Анотація

CryptoSlate reports that a novel scam has emerged on Robinhood Chain, the permissionless Ethereum Layer 2 launched by Robinhood. Cross-chain protocol Relay has issued a warning about fraudulent tokens designed to self-destruct or disappear from users' wallets immediately after purchase, resulting in a total loss of the funds spent. Notably, the incidents do not involve stolen private keys or compromise of other assets in the wallet, isolating the loss to the specific purchased token. Relay is responding by blocking the identified scam tokens and verifying others it deems safe, while emphasizing that anyone can list tokens on the permissionless chain. The warning highlights the inherent risks of a "buy-first, vet-later" environment on permissionless networks, where scam contracts can outpace security warnings. The report coincides with a surge in speculative trading on the new chain, including significant decentralized exchange volume and integration with platforms like Pump.fun. The article raises questions about which interfaces users employed for the transactions and the effectiveness of pre-transaction screening by various service providers like Relay, 0x API, and LI.FI. It underscores the challenge of ensuring warnings reach users before they finalize irreversible purchases in a fast-moving, open ecosystem.

Author: CryptoSlate

Compiled by: TechFlow

Deep Tide Introduction: A new scam has emerged on Robinhood Chain just two weeks after its launch: users buy tokens, and the tokens directly disappear from their wallets. The money spent is irretrievable, but private keys and other assets remain intact. This exposes a fatal risk of 'buy first, check later' on permissionless chains - when warning systems can't keep up with scammer contracts, retail investors become the guinea pigs.

The cross-chain trading protocol Relay claims that buyers on Robinhood Chain (the permissionless Ethereum Layer 2 launched by Robinhood) have suffered financial losses after purchasing tokens, with these tokens vanishing directly from wallets post-purchase.

Relay highlighted this issue, stating the funds are unrecoverable, but did not promote these tokens or explain why they disappeared from wallets.

These incidents reportedly do not involve wallet or private key theft. Relay stated that private keys and other balances, aside from the affected tokens, remain unaffected. Relay is blocking problematic tokens, verifying assets it deems safe, and reminding users that anyone can list a token.

Relay attributed the losses to specific, potentially problematic token purchases on Robinhood Chain. However, it did not specify whether transactions were conducted through the Robinhood Wallet or suggest that brokerage accounts and other Robinhood products were affected.

Relay announced:

We have noticed reports of tokens disappearing from wallets after purchase on Robinhood Chain. There has been an increase in scam tokens specifically designed to self-remove after being bought. If you purchased one, unfortunately, the money you spent is gone. We are blocking these tokens and verifying safe ones.

Relay did not publish the affected contract addresses or transaction records, so the reported losses cannot be independently verified.

Robinhood Launches Wall Street Layer 2, Market Initially Pumps Out a $150 Million Cat Coin

Robinhood launched its permissionless public mainnet on July 1. The company stated it serves nearly 28 million clients across 38 countries, although this figure reflects its company-wide coverage, not on-chain user count or the number of affected buyers.

This warning was issued during the initial surge of speculative trading on Robinhood Chain. DEX trading volume peaked at nearly $400 million on July 7, and Pump.fun added support for trading Robinhood Chain tokens on July 8.

Robinhood's Expanding Crypto Bet Encounters Even Faster-Evolving Meme Market Frenzy

Who Blocks Tokens Before Trading?

The open token creation mechanism allows developers to deploy contracts without Robinhood's approval. Third-party tokens and liquidity can form around the Robinhood brand without app store listing. Relay's warning shifts the question from which assets attract attention to what buyers saw before signing.

Relay operates an independent cross-chain bridge and swap interface that supports Robinhood Chain. Robinhood Wallet's own support page states its in-app swap routes through the 0x API and LI.FI, while the interface used by affected buyers remains unidentified.

0x indicates it supports tokens by default unless blocked for compliance reasons, and custom ERC-20 tokens can be traded once liquidity exists on the sourced markets. Relay states it screens transactions against sanctions and risk databases and maintains internal blocklists.

Its warning mentions blocking affected tokens and verifying others but does not specify whether buyers saw warnings before signing or only after completing the purchase.

Singapore Adds Hyperliquid to Warning List, Citing Lack of Provided Protections

Robinhood's general scam guide covers malicious smart contracts, pump-and-dump schemes, and rug pulls, advising users to review transaction details before signing. The page does not explain whether token screening occurs before in-wallet swaps or address tokens whose balances disappear after purchase.

The next test will be the speed at which warnings and blocklists propagate across trading interfaces, and whether tokens removed from Relay remain available elsewhere. Relay's post did not disclose contract addresses, number of buyers, total losses, or technical cause. Users need to know asset status before irreversible purchases, when warnings can still change the outcome.

Пов'язані питання

QWhat is the main security issue reported on Robinhood Chain, and how does it affect users?

AThe main security issue is the appearance of scam tokens designed to self-destruct or disappear from a user's wallet immediately after purchase. This results in users losing the money they spent on the token, while their private keys and other assets in the wallet remain untouched and secure.

QWhich company issued the warning about the disappearing tokens on Robinhood Chain, and what actions did they take in response?

AThe cross-chain trading protocol Relay issued the warning. In response, they stated they are blocking the identified scam tokens and verifying other tokens they consider to be safe to protect users.

QAccording to the article, what does the incident expose about the risks of permissionless blockchains like Robinhood Chain?

AThe incident exposes the 'buy first, review later' risk inherent in permissionless chains. When scammers can deploy malicious contracts faster than warning systems can identify and alert users, retail investors become vulnerable test subjects for these schemes.

QWhat key detail is missing from Relay's warning, according to the article's critique?

ARelay's warning did not disclose specific details such as the contract addresses of the scam tokens, the number of affected buyers, the total amount of losses, or the exact technical mechanism causing the tokens to disappear. This lack of information makes independent verification of the reports difficult.

QHow does the article describe the trading environment on Robinhood Chain around the time of this warning?

AThe warning was issued during Robinhood Chain's initial surge in speculative trading activity. The article notes that decentralized exchange volume neared a peak of $400 million, and platforms like Pump.fun had just added support for trading Robinhood Chain tokens.

Пов'язані матеріали

Solana Validators Approve Proposal to Accelerate SOL Disinflation

Solana validators have approved a proposal to accelerate the network's disinflation by doubling the annual disinflation rate from 15% to 30%, while keeping the long-term target inflation rate at 1.5%. The measure, known as SGP-0002 or "Double Disinflation," passed with 67% support from the voting stake. This change means Solana is expected to reach its final inflation target in roughly 2.8 years instead of 5.7 years, potentially reducing future SOL issuance by about 18.9 million over the next six years. This will decrease dilution for SOL holders but also lower staking rewards for validators and delegators. The vote was part of Solana's first mandatory governance process. Major validators were divided, with Figment voting against and Helius and Jupiter strongly in favor. Kraken changed its position during the voting period, ultimately supporting the proposal. The governance decision comes as U.S.-listed Solana ETFs continue to see strong investor interest, with Bitwise's Solana ETF recently surpassing $1 billion in assets under management.

cryptonews.ru27 хв тому

Solana Validators Approve Proposal to Accelerate SOL Disinflation

cryptonews.ru27 хв тому

Access to Active Sessions Instead of Databases: How the Shadow Market in Russia Has Changed

The Russian cybercriminal underground is shifting from selling massive, stolen corporate databases to trading active, short-term access to user accounts, according to a 2026 report. The value of information intercepted directly from infected devices by malware has risen nearly 13% in a year. Attackers now sell packets containing active session tokens (bypassing passwords and two-factor authentication), live email credentials, VPN and cloud storage logins, and corporate network access. A subscription for a steady stream of fresh data costs $250-$300 per month, far exceeding the value of outdated archives. While Russian regulators have successfully penalized companies for data leaks from centralized storage—with no repeat violations recorded after imposing turnover fines—this framework fails against the new threat model. Malware now steals data *after* it leaves the corporate perimeter and is on a user's personal device, a legal grey area. In 2026, 60% of studied web attacks aimed to steal keys for infiltrating corporate infrastructure. The situation mirrors global trends, akin to the Genesis Market shutdown in 2023, and highlights a structural risk: the demand for "fresh" data incentivizes botnet operators to maintain long-term control of infected devices for recurring revenue. This creates a persistent vulnerability layer between personal devices and corporate networks, currently outside the reach of existing regulatory protections.

cryptonews.ru31 хв тому

Access to Active Sessions Instead of Databases: How the Shadow Market in Russia Has Changed

cryptonews.ru31 хв тому

The UK tax authority's (HMRC) first crypto data shows young male minority captured most of the profits

The UK's tax authority (HMRC) has released its first data isolating cryptocurrency capital gains. For the 2024-2025 tax year, 17,600 individuals declared a total taxable profit of £1.38 billion from crypto sales. A small group of 240 people, each earning over £1 million, accounted for £717 million (over half) of this total profit, despite representing less than 2% of filers. In contrast, the majority (65%) reported profits under £25,000, contributing only 7% of the total profit. The data reveals a demographic heavily skewed toward young men. 87% of filers were male, claiming 93% of all crypto profit. 81% of crypto taxpayers are under 54, with the 25-44 age group generating 71% of the total sales volume but only 45% of the profit. The figures became possible as HMRC introduced a dedicated crypto field on self-assessment forms. Looking ahead, HMRC expects to receive client data from crypto service providers starting in 2027 under the OECD's Crypto-Asset Reporting Framework, which it says will make targeting non-compliant investors far easier.

cryptonews.ru31 хв тому

The UK tax authority's (HMRC) first crypto data shows young male minority captured most of the profits

cryptonews.ru31 хв тому

Bitfinex Signals the Start of a Bitcoin Bull Run Amid Peak Correlation with Gold

Bitfinex suggests that Bitcoin's correlation with gold has reached peak levels, signaling a potential shift and the beginning of a bull market. Analysts observe that both assets are trading as a unified hedge against currency devaluation amidst concerns over U.S. debt and monetary policy. Bitfinex notes this high correlation is typically unsustainable, and a change in risk sentiment will test whether Bitcoin decouples from stocks to follow gold. The exchange highlights that Bitcoin's price has moved from an accumulation to an expansion phase, supported by technical metrics. This trend mirrors 2024 patterns where investors sought alternatives due to fears of "debt debasement." However, recent hawkish comments from Federal Reserve Chair Kevin Warsh, emphasizing a commitment to 2% inflation and hinting at rate hikes, contrast with this devaluation narrative.

cryptonews.ru33 хв тому

Bitfinex Signals the Start of a Bitcoin Bull Run Amid Peak Correlation with Gold

cryptonews.ru33 хв тому

SlowMist Flags Fake Qwen 3.8 27B GitHub Repository Concealing StealC Information

SlowMist has identified a fake GitHub repository impersonating Alibaba's Qwen 3.8 27B AI model, which contains an information-stealing virus. The repository, created in August 2026, offered a download file of only 487 KB, far smaller than a legitimate 27-billion-parameter model (over 16 GB). The malicious ZIP file contained a Lua-based script disguised as a certificate, which deploys the StealC malware. Once executed, StealC harvests system data, takes screenshots, and steals browser credentials, cryptocurrency wallet information, and more, sending it to attacker-controlled servers. The malware also includes a backup system that can read new server addresses from the Polygon blockchain if the primary server is taken down. This incident is part of a broader campaign called FakeGit, active since March 2025, which has created thousands of malicious repositories. Approximately 800 of these specifically target AI tools using a method called AgentBaiting, sometimes tricking AI assistants into recommending them. Separate reports detail hundreds of other fake GitHub repositories spreading malware like BoryptGrab and campaigns like Megalodon that generate thousands of clones rapidly. Attackers copy legitimate projects, create convincing documentation, and even list them on public AI registries to appear trustworthy. The fake repositories exploit the high demand for open-source AI capabilities, putting users who run models locally at significant risk of data theft.

cryptonews.ru33 хв тому

SlowMist Flags Fake Qwen 3.8 27B GitHub Repository Concealing StealC Information

cryptonews.ru33 хв тому

Торгівля

Спот
活动图片