A hacker has scammed more than 600 different crypto wallets for over 930,000 ARB tokens using a phishing attack and address poisoning via a malicious smart contract. The ARB tokens were received from a different Arbitrum address on March 24, following the network's airdrop. Independent researchers 0xKnight and Brainsy both found victim reports of the hack, with Brainsy labeling the fake ARB token contract and phishing smart contract created by "Fake_Phishing18". The same entity may also have created a fake website claiming ARB tokens on the user's behalf to gain control over their wallets. MetaMask has warned against such attacks, which poison users' address lists by sending transactions from addresses that closely resemble those the user has already interacted with.

Source: Decrypt

Original Link: https://decrypt.co/125037/address-poisoning-attack-sees-scammer-make-off-1-3m-in-arb-tokens