View source for MetaMask Ethereum Hacked Sup 55

{{Case Study Under Construction}}{{DISPLAYTITLE:MetaMask Ethereum Hacked Sup_55}}[[File:Metamask.jpg|thumb|MetaMask]]Reddit user Sup_55 had their Ethereum taken from their MetaMask wallet. The exact mechanism of the theft is presently unknown. There are several potential transactions which could have been the theft.

== About Sup_55 ==
Sup_55 was born in February 2002<ref>[https://old.reddit.com/r/teenagers/comments/ssyqln/was_feelin_myself_here/hx0kwhj/ Sup_55 - "this was a few days after my 20th bday" - Reddit] (Aug 22, 2023)</ref> and lives in The Hague, Netherlands near Laakhaven<ref>[https://old.reddit.com/r/TheHague/comments/13aq1u3/is_this_a_safe_neighborhood_for_a_student_to_live/jjgj2ok/ Sup_55 - "Yes! I live literally in that circle. I am a guy though" - Reddit] (Aug 22, 2023)</ref>. He has a tattoo inspired by One Piece<ref>[https://old.reddit.com/r/OnePiece/comments/v0acni/my_first_tattoo_inspired_by_one_piece/ Sup_55 - "My first tattoo inspired by One Piece!" - Reddit] (Aug 22, 2023)</ref>.

== About MetaMask ==

== The Reality ==
TBD

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - MetaMask Ethereum Hacked Sup_55
!Date
!Event
!Description
|-
|December 31st, 2021 11:52:54 PM MST
|First Transaction To Attacker Wallet
|The very first transaction happens to the attacker's wallet, where it is funded by 0.227498685696200008 ETH<ref>[https://etherscan.io/tx/0xf1b8593e3fe0dea6ff8115e7d80af58e646f1b12878d33afc1a59aecdee1f44a Attacker Wallet Initially Funded With 0.227498685696200008 ETH - Etherscan] (Jul 23, 2023)</ref>.
|-
|January 6th, 2022 11:30:30 AM MST
|Transfer To Attacker's Wallet
|The attacker's wallet receives 1.224395983208325075 ETH<ref name="etherscan-11191" />.
|-
|January 9th, 2022 1:55:51 AM MST
|Transfer To Attacker's Wallet
|The attacker's wallet receives 0.220123840391726 ETH<ref name="etherscan-11190" />.
|-
|January 9th, 2022 2:02:35 AM MST
|Transfer To Attacker's Wallet
|The attacker's wallet receives 0.093420801498595 ETH<ref name="etherscan-11189" />.
|-
|January 9th, 2022 5:35:25 AM MST
|Transfer To Attacker's Wallet
|The attacker's wallet receives 0.078 ETH<ref name="etherscan-11188" />.
|-
|January 10th, 2022 1:37:15 AM MST
|Transfer To Attacker's Wallet
|The attacker's wallet receives 1.014009665159184041 ETH<ref name="etherscan-11187" />.
|-
|January 10th, 2022 2:55:02 AM MST
|Reddit Post
|Incident is posted about on Reddit<ref name="redditold-11185" />. TBD more comment review.
|-
|January 10th, 2022 3:35:33 AM MST
|Unanswered Questions
|Sup_55 is asked whether they have "been trading any NFTs or connected and approved transactions on any sites recently" or if they may have given away their seed phrase<ref name=":0">[https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/hs1pb67/ PotentialBreakfast34 - "Have you been trading any NFTs or connected and approved transactions on any sites recently? Or have you given your seed phrase to anyone?" - Reddit] (Jul 23, 2023)</ref>. This question is never answered.
|-
|January 31st, 2022 7:20:16 AM MST
|Attacker Wallet Funds Transferred
|The reported attack wallet transfers their Ethereum funds (totaling 5.312751225715968609 ETH) to another wallet address<ref name=":1">[https://etherscan.io/tx/0xb1b158b3d09404e6d99550c7799814bebbec28261dfc4a78fe5d2f55ee4226e9 Transfer Of Funds To New Wallet - Etherscan] (Jul 23, 2023)</ref>.
|}

== Technical Details ==
<ref name="etherscan-11186" />

This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

"This is the wallet address of the hacker:

0x2e12C82E41e99a0eC69721D5E582AD3Db1F2A286

=== Attacker Wallet Cleared Out ===
The attacker moved all funds to a new wallet address<ref name=":1" />.

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

=== Opening Ticket With MetaMask ===
Sup_55 reportedly opened a ticket with MetaMask<ref>[https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/hs1mt43/ Sup_55 - "I've opened a ticket with them and I gave them the wallet address of the scammer/hacker and the transaction ID of how much was taken and when from my account to their's." - Reddit] (Aug 22, 2023)</ref>. TBD expand.

=== Incident Posted On Reddit ===
Sup_55 posted on the ethereum subreddit with limited details of what had transpired<ref name="redditold-11185" />.<blockquote>"This is the wallet address of the hacker:

0x2e12C82E41e99a0eC69721D5E582AD3Db1F2A286

Please beware and any info and what do to can help! I've already sent Metamask the info of the transactions. Now I'm just suffering in silence (F in the chat)"</blockquote>

=== Community Reactions on Reddit ===
<ref name=":0" /><ref name="redditold-11184" />.

<blockquote>Have you been trading any NFTs or connected and approved transactions on any sites recently? Or have you given your seed phrase to anyone?</blockquote><blockquote>Leave a comment on there wallet address asking for the crypto back . Not much can be done unless it ends up in a exchange and they are willing to help somehow</blockquote>TBD: Review when archive back online: <ref>https://web.archive.org/web/20220110100240/https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/hs1ml9h/</ref>

== Ultimate Outcome ==
TBD

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

== Ongoing Developments ==
TBD
== Individual Prevention Policies ==
The exploit was most likely the result of Sup_55 providing their seed phrase to a scammer, installing malware on their computer, or approving a malicious transaction. Offline storage provides an alternative for a cryptocurrency user to massively reduce their risk.

{{Prevention:Individuals:Never Share Private Keys}}

{{Prevention:Individuals:Always Verify Executables}}

{{Prevention:Individuals:Double Check Transactions}}

{{Prevention:Individuals:Store Funds Offline}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
Platforms have a responsibility to educate new users and ensure understanding. They can work together to create an industry insurance fund to assist affected users.

{{Prevention:Platforms:Cryptocurrency Safety Quiz}}

{{Prevention:Platforms:Establish Industry Insurance Fund}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
Regulators have a responsibility to educate their citizens and ensure understanding. Regulators can encourage platforms to create an industry insurance fund to assist affected users.

{{Prevention:Regulators:Cryptocurrency Education Mandate}}

{{Prevention:Regulators:Establish Industry Insurance Fund}}

{{Prevention:Regulators:End}}

== References ==
<references>
<ref name="redditold-11184">[https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/hs1ukbw/ Tradegrow - "Leave a comment on there wallet address asking for the crypto back . Not much can be done unless it ends up in a exchange and they are willing to help somehow" - Reddit] (Oct 3, 2022)</ref>
<ref name="redditold-11185">[https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/ Sup_55 - NEED HELP! Hacked Metamask account - Reddit] (Jun 1, 2023)</ref>
<ref name="etherscan-11186">[https://etherscan.io/address/0x2e12C82E41e99a0eC69721D5E582AD3Db1F2A286 Reported Hacker's Address - Etherscan] (Jun 1, 2023)</ref>
<ref name="etherscan-11187">[https://etherscan.io/tx/0xe971e2660a412228d029b41aa36d6b012b97b6adee2625a2ed5c1d9c0b515c13 Transfer of 1.014009665159184041 ETH - Etherscan] (Jun 1, 2023)</ref>
<ref name="etherscan-11188">[https://etherscan.io/tx/0x20df2128202838826ae9ad8eaea0193dcb56675da28a369ddb76ca85da77a29f Transfer Of 0.078 ETH - Etherscan] (Jun 1, 2023)</ref>
<ref name="etherscan-11189">[https://etherscan.io/tx/0x9de8803930e9b8e01a530dddc8cd164b6f075f72afae0f4b04ab22fc837d6553 Transfer Of 0.093420801498595 ETH - Etherscan] (Jun 1, 2023)</ref>
<ref name="etherscan-11190">[https://etherscan.io/tx/0x78983788ec1f37ee408ad419dcf6ce7faf104c3833bc62ed2e32d1144eb3b9bc Transfer Of 0.220123840391726 ETH - Etherscan] (Jun 1, 2023)</ref>
<ref name="etherscan-11191">[https://etherscan.io/tx/0xc29a6a0c0e15e27fbc0053efa56f6aec32b617b0039426fa383eef63d44e52f7 Transfer Of 1.224395983208325075 ETH to Attacker's Wallet - Etherscan] (Jun 1, 2023)</ref>
</references>