User Loses $85,000 in sNUSD to Phishing Scam
Key Takeaways
- A user lost approximately $85,000 in sNUSD due to a phishing attack.
- The attack involved a malicious approval transaction that the user unknowingly signed.
- GoPlus monitoring was instrumental in identifying the scam.
- Phishing scams are a rising threat in the crypto space, underscoring the need for vigilance.
WEEX Crypto News, 19 March 2026
In a shocking revelation, a user has fallen victim to a phishing scam, leading to the loss of $85,000 worth of sNUSD. This incident, reported by PANews on March 19, 2026, underscores the growing threats that cryptocurrency holders face in the digital landscape. According to the details provided by GoPlus, the user inadvertently approved a malicious transaction that facilitated the theft.
Understanding the Phishing Attack
The critical element in this phishing attack was the misuse of a feature known as “malicious approval” within the crypto sphere. This type of scam typically entices users to grant permissions that give hackers control over the victim’s crypto assets. The attackers cleverly crafted a transaction that appeared legitimate, prompting the user to approve access unknowingly. This access allowed the perpetrators to drain the user’s wallet.
GoPlus, a blockchain security monitoring service, played a crucial role in identifying the breach. Despite such systems being in place, the incident stands as a stark reminder of the vulnerabilities present in defi-119">decentralized finance (DeFi) systems.
Why Misleading Approvals Are Effective
Malicious approvals are designed to exploit the trust or a lack of understanding that users have regarding transaction permissions. Often, these approvals are embedded in seemingly standard transactions required for engaging with dapps-4607">decentralized applications (dApps). When such a transaction occurs, users inadvertently confer excessive permissions to the dApp, enabling it to manage or spend tokens freely without explicit further consent from the user.
Typically, users might deal with dApp interfaces assuming that their operations are secure, especially when interacting through wallets or platforms that are reputed in the ecosystem. However, the subtle nature of malicious approvals circumvents typical user safeguards by leveraging familiar interfaces and processes in deceptive ways.
The Role of Monitoring Tools
The ability of platforms like GoPlus to monitor and report real-time threats is invaluable. These systems track and analyze blockchain activity to detect anomalies, such as unauthorized access requests or suspicious fund transfers. In this particular case, GoPlus alerted authorities to the malicious transaction, highlighting the necessity of integrating security checks at multiple points of transaction processing.
Real-World Impact and Potential Solutions
The impact of such scams is manifold, affecting individual users and the broader perception of safety within the crypto environment. Incidents like these can discourage novice investors who already approach blockchain technology with caution due to its complexity and perceived risks.
To counteract these threats, the cryptocurrency community needs to invest in enhanced security measures and user education. This includes implementing more stringent security audits on smart contracts, offering users tools to easily review and understand token approvals before confirming them, and widespread educational campaigns to raise awareness about common phishing tactics.
Additionally, platforms like WEEX actively engage with their user base to promote secure trading practices and offer resources to navigate the risks associated with digital asset management. For those interested in a more secure trading environment, consider signing up for WEEX [here](https://www.weex.com/register?vipCode=vrmi).
Broader Implications for Crypto Security
This incident is far from isolated. Instances of financial loss due to similar scams highlight the need for continuous technological advancement in blockchain security. It demands a collective effort from developers, security experts, and users to create a safer crypto ecosystem.
As security protocols evolve, so too must user awareness and education. Understanding how blockchain permissions work and the tactics used by scammers can be a vital line of defense. By fostering a culture of security-first thinking, the crypto space can hope to mitigate the risks posed by bad actors seeking to exploit vulnerabilities.
FAQ
What is a malicious transaction approval?
A malicious transaction approval is a process where a user unknowingly grants unauthorized access to their crypto assets by approving a transaction designed to look legitimate but actually allows third parties to control and drain the user’s wallet.
How did the phishing attack occur?
The phishing attack was executed by crafting a transaction that appeared regular, prompting the user to approve it. This approval unknowingly gave access permissions to the attackers, allowing them to transfer the sNUSD from the user’s wallet.
How can one prevent falling victim to such scams?
Users should always verify the details of any transaction approvals, avoid clicking on unverified links, and use security solutions that offer monitoring of wallet activity. Continuous education about common scams is also crucial.
What role did GoPlus play in this incident?
GoPlus was pivotal in monitoring blockchain activities and alerting about the fraudulent transaction, illustrating the importance of having robust security monitoring tools within the cryptocurrency framework.
How does this incident affect the perception of cryptocurrency safety?
Incidents like these contribute to unease about cryptocurrency safety among users. While it highlights vulnerabilities, it also emphasizes the importance of developing stronger security measures and educating users to better protect their assets.
You may also like

Consumer-grade Crypto Global Survey: Users, Revenue, and Track Distribution

Prediction Markets Under Bias

Stolen: $290 million, Three Parties Refusing to Acknowledge, Who Should Foot the Bill for the KelpDAO Incident Resolution?

ASTEROID Pumped 10,000x in Three Days, Is Meme Season Back on Ethereum?

ChainCatcher Hong Kong Themed Forum Highlights: Decoding the Growth Engine Under the Integration of Crypto Assets and Smart Economy

Why can this institution still grow by 150% when the scale of leading crypto VCs has shrunk significantly?

Anthropic's $1 trillion, compared to DeepSeek's $100 billion

Geopolitical Risk Persists, Is Bitcoin Becoming a Key Barometer?

Annualized 11.5%, Wall Street Buzzing: Is MicroStrategy's STRC Bitcoin's Savior or Destroyer?

An Obscure Open Source AI Tool Alerted on Kelp DAO's $292 million Bug 12 Days Ago

Mixin has launched USTD-margined perpetual contracts, bringing derivative trading into the chat scene.
The privacy-focused crypto wallet Mixin announced today the launch of its U-based perpetual contract (a derivative priced in USDT). Unlike traditional exchanges, Mixin has taken a new approach by "liberating" derivative trading from isolated matching engines and embedding it into the instant messaging environment.
Users can directly open positions within the app with leverage of up to 200x, while sharing positions, discussing strategies, and copy trading within private communities. Trading, social interaction, and asset management are integrated into the same interface.
Based on its non-custodial architecture, Mixin has eliminated friction from the traditional onboarding process, allowing users to participate in perpetual contract trading without identity verification.
The trading process has been streamlined into five steps:
· Choose the trading asset
· Select long or short
· Input position size and leverage
· Confirm order details
· Confirm and open the position
The interface provides real-time visualization of price, position, and profit and loss (PnL), allowing users to complete trades without switching between multiple modules.
Mixin has directly integrated social features into the derivative trading environment. Users can create private trading communities and interact around real-time positions:
· End-to-end encrypted private groups supporting up to 1024 members
· End-to-end encrypted voice communication
· One-click position sharing
· One-click trade copying
On the execution side, Mixin aggregates liquidity from multiple sources and accesses decentralized protocol and external market liquidity through a unified trading interface.
By combining social interaction with trade execution, Mixin enables users to collaborate, share, and execute trading strategies instantly within the same environment.
Mixin has also introduced a referral incentive system based on trading behavior:
· Users can join with an invite code
· Up to 60% of trading fees as referral rewards
· Incentive mechanism designed for long-term, sustainable earnings
This model aims to drive user-driven network expansion and organic growth.
Mixin's derivative transactions are built on top of its existing self-custody wallet infrastructure, with core features including:
· Separation of transaction account and asset storage
· User full control over assets
· Platform does not custody user funds
· Built-in privacy mechanisms to reduce data exposure
The system aims to strike a balance between transaction efficiency, asset security, and privacy protection.
Against the background of perpetual contracts becoming a mainstream trading tool, Mixin is exploring a different development direction by lowering barriers, enhancing social and privacy attributes.
The platform does not only view transactions as execution actions but positions them as a networked activity: transactions have social attributes, strategies can be shared, and relationships between individuals also become part of the financial system.
Mixin's design is based on a user-initiated, user-controlled model. The platform neither custodies assets nor executes transactions on behalf of users.
This model aligns with a statement issued by the U.S. Securities and Exchange Commission (SEC) on April 13, 2026, titled "Staff Statement on Whether Partial User Interface Used in Preparing Cryptocurrency Securities Transactions May Require Broker-Dealer Registration."
The statement indicates that, under the premise where transactions are entirely initiated and controlled by users, non-custodial service providers that offer neutral interfaces may not need to register as broker-dealers or exchanges.
Mixin is a decentralized, self-custodial privacy wallet designed to provide secure and efficient digital asset management services.
Its core capabilities include:
· Aggregation: integrating multi-chain assets and routing between different transaction paths to simplify user operations
· High liquidity access: connecting to various liquidity sources, including decentralized protocols and external markets
· Decentralization: achieving full user control over assets without relying on custodial intermediaries
· Privacy protection: safeguarding assets and data through MPC, CryptoNote, and end-to-end encrypted communication
Mixin has been in operation for over 8 years, supporting over 40 blockchains and more than 10,000 assets, with a global user base exceeding 10 million and an on-chain self-custodied asset scale of over $1 billion.

$600 million stolen in 20 days, ushering in the era of AI hackers in the crypto world

Vitalik's 2026 Hong Kong Web3 Summit Speech: Ethereum's Ultimate Vision as the "World Computer" and Future Roadmap

On the same day Aave introduced rsETH, why did Spark decide to exit?

Full Post-Mortem of the KelpDAO Incident: Why Did Aave, Which Was Not Compromised, End Up in Crisis Situation?

After a $290 million DeFi liquidation, is the security promise still there?

ZachXBT's post ignites RAVE nearing zero, what is the truth behind the insider control?







