MetaMask Ethereum Hacked Sup 55 - Revision history

Azoundria: Another 30 minutes complete. Prevention added and much more research.

2023-08-22T22:28:13Z

Another 30 minutes complete. Prevention added and much more research.

← Older revision		Revision as of 16:28, 22 August 2023
Line 2:		Line 2:

	== About Sup_55 ==		== About Sup_55 ==
			Sup_55 was born in February 2002<ref>[https://old.reddit.com/r/teenagers/comments/ssyqln/was_feelin_myself_here/hx0kwhj/ Sup_55 - "this was a few days after my 20th bday" - Reddit] (Aug 22, 2023)</ref> and lives in The Hague, Netherlands near Laakhaven<ref>[https://old.reddit.com/r/TheHague/comments/13aq1u3/is_this_a_safe_neighborhood_for_a_student_to_live/jjgj2ok/ Sup_55 - "Yes! I live literally in that circle. I am a guy though" - Reddit] (Aug 22, 2023)</ref>. He has a tattoo inspired by One Piece<ref>[https://old.reddit.com/r/OnePiece/comments/v0acni/my_first_tattoo_inspired_by_one_piece/ Sup_55 - "My first tattoo inspired by One Piece!" - Reddit] (Aug 22, 2023)</ref>.

	== About MetaMask ==		== About MetaMask ==
Line 72:		Line 73:
	== Immediate Reactions ==		== Immediate Reactions ==
	How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?		How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

			=== Opening Ticket With MetaMask ===
			Sup_55 reportedly opened a ticket with MetaMask<ref>[https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/hs1mt43/ Sup_55 - "I've opened a ticket with them and I gave them the wallet address of the scammer/hacker and the transaction ID of how much was taken and when from my account to their's." - Reddit] (Aug 22, 2023)</ref>. TBD expand.

	=== Incident Posted On Reddit ===		=== Incident Posted On Reddit ===
Line 83:		Line 87:
	<ref name=":0" /><ref name="redditold-11184" />.		<ref name=":0" /><ref name="redditold-11184" />.

	<blockquote>Have you been trading any NFTs or connected and approved transactions on any sites recently? Or have you given your seed phrase to anyone?</blockquote><blockquote>Leave a comment on there wallet address asking for the crypto back . Not much can be done unless it ends up in a exchange and they are willing to help somehow</blockquote>		<blockquote>Have you been trading any NFTs or connected and approved transactions on any sites recently? Or have you given your seed phrase to anyone?</blockquote><blockquote>Leave a comment on there wallet address asking for the crypto back . Not much can be done unless it ends up in a exchange and they are willing to help somehow</blockquote>TBD: Review when archive back online: <ref>https://web.archive.org/web/20220110100240/https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/hs1ml9h/</ref>

	== Ultimate Outcome ==		== Ultimate Outcome ==
	~~What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?~~		TBD

	== Total Amount Recovered ==		== Total Amount Recovered ==
	There do not appear to have been any funds recovered in this case.		There do not appear to have been any funds recovered in this case.

	~~What funds were recovered? What funds were reimbursed for those affected users?~~

	== Ongoing Developments ==		== Ongoing Developments ==
	TBD		TBD
	== Individual Prevention Policies ==		== Individual Prevention Policies ==
	~~{{Prevention:Individuals:Placeholder}}~~		The exploit was most likely the result of Sup_55 providing their seed phrase to a scammer, installing malware on their computer, or approving a malicious transaction. Offline storage provides an alternative for a cryptocurrency user to massively reduce their risk.

	{{Prevention:Individuals:Never Share Private Keys}}		{{Prevention:Individuals:Never Share Private Keys}}
Line 109:		Line 111:

	== Platform Prevention Policies ==		== Platform Prevention Policies ==
	~~{{Prevention:~~Platforms~~:Placeholder}}~~		Platforms have a responsibility to educate new users and ensure understanding. They can work together to create an industry insurance fund to assist affected users.

	{{Prevention:Platforms:Cryptocurrency Safety Quiz}}		{{Prevention:Platforms:Cryptocurrency Safety Quiz}}
Line 118:		Line 120:

	== Regulatory Prevention Policies ==		== Regulatory Prevention Policies ==
	~~{{Prevention:~~Regulators~~:Placeholder}}~~		Regulators have a responsibility to educate their citizens and ensure understanding. Regulators can encourage platforms to create an industry insurance fund to assist affected users.

	{{Prevention:Regulators:Cryptocurrency Education Mandate}}		{{Prevention:Regulators:Cryptocurrency Education Mandate}}

Azoundria: Another 30 minutes complete. Additional sources merged in.

2023-07-23T18:04:46Z

Another 30 minutes complete. Additional sources merged in.

Show changes

Azoundria: Created page with "{{DISPLAYTITLE:MetaMask Ethereum Hacked Sup_55}} {{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/metamaskethereumhackedsup55.php}} {{Unattributed Sources}} MetaMaskReddit user Sup_55 had their Ethereum taken from their MetaMask wallet. The exact mechanism of the theft is presently unknown. There are several potential transactions which could have been the theft. This is a global/international case not involving a sp..."

2023-06-16T05:16:41Z

Created page with "{{DISPLAYTITLE:MetaMask Ethereum Hacked Sup_55}} {{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/metamaskethereumhackedsup55.php}} {{Unattributed Sources}} thumb|MetaMaskReddit user Sup_55 had their Ethereum taken from their MetaMask wallet. The exact mechanism of the theft is presently unknown. There are several potential transactions which could have been the theft. This is a global/international case not involving a sp..."

New page

{{DISPLAYTITLE:MetaMask Ethereum Hacked Sup_55}}
{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/metamaskethereumhackedsup55.php}}
{{Unattributed Sources}}

[[File:Metamask.jpg|thumb|MetaMask]]Reddit user Sup_55 had their Ethereum taken from their MetaMask wallet. The exact mechanism of the theft is presently unknown. There are several potential transactions which could have been the theft.

This is a global/international case not involving a specific country.<ref name="redditold-11184" /><ref name="redditold-11185" /><ref name="etherscan-11186" /><ref name="etherscan-11187" /><ref name="etherscan-11188" /><ref name="etherscan-11189" /><ref name="etherscan-11190" /><ref name="etherscan-11191" />

== About MetaMask ==
"This is the wallet address of the hacker:

0x2e12C82E41e99a0eC69721D5E582AD3Db1F2A286

Please beware and any info and what do to can help! I've already sent Metamask the info of the transactions. Now I'm just suffering in silence (F in the chat)"

"Leave a comment on there wallet address asking for the crypto back . Not much can be done unless it ends up in a exchange and they are willing to help somehow"

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - MetaMask Ethereum Hacked Sup_55
!Date
!Event
!Description
|-
|January 10th, 2022 2:55:02 AM MST
|Reddit Post
|Incident is posted about on Reddit.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="redditold-11184">[https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/hs1ukbw/ Tradegrow comments on NEED HELP! Hacked Metamask account] (Oct 3, 2022)</ref>

<ref name="redditold-11185">[https://old.reddit.com/r/ethereum/comments/s0gh4i/need_help_hacked_metamask_account/ NEED HELP! Hacked Metamask account : ethereum] (Jun 1, 2023)</ref>

<ref name="etherscan-11186">[https://etherscan.io/address/0x2e12C82E41e99a0eC69721D5E582AD3Db1F2A286 Address 0x2e12C82E41e99a0eC69721D5E582AD3Db1F2A286 | Etherscan] (Jun 1, 2023)</ref>

<ref name="etherscan-11187">[https://etherscan.io/tx/0xe971e2660a412228d029b41aa36d6b012b97b6adee2625a2ed5c1d9c0b515c13 Ethereum Transaction Hash (Txhash) Details | Etherscan] (Jun 1, 2023)</ref>

<ref name="etherscan-11188">[https://etherscan.io/tx/0x20df2128202838826ae9ad8eaea0193dcb56675da28a369ddb76ca85da77a29f Ethereum Transaction Hash (Txhash) Details | Etherscan] (Jun 1, 2023)</ref>

<ref name="etherscan-11189">[https://etherscan.io/tx/0x9de8803930e9b8e01a530dddc8cd164b6f075f72afae0f4b04ab22fc837d6553 Ethereum Transaction Hash (Txhash) Details | Etherscan] (Jun 1, 2023)</ref>

<ref name="etherscan-11190">[https://etherscan.io/tx/0x78983788ec1f37ee408ad419dcf6ce7faf104c3833bc62ed2e32d1144eb3b9bc Ethereum Transaction Hash (Txhash) Details | Etherscan] (Jun 1, 2023)</ref>

<ref name="etherscan-11191">[https://etherscan.io/tx/0xc29a6a0c0e15e27fbc0053efa56f6aec32b617b0039426fa383eef63d44e52f7 Ethereum Transaction Hash (Txhash) Details | Etherscan] (Jun 1, 2023)</ref></references>