Darkcryptomoon Ethereum NFT Con Man

Notice: This page is a new case study and some aspects have not been fully researched. Some sections may be incomplete or reflect inaccuracies present in initial sources. Please check the References at the bottom for further information and perform your own additional assessment. Please feel free to contribute by adding any missing information or sources you come across. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

MetaMask

Darkcryptomoon is a father and user of multiple cryptocurrencies, heavily interested in NFTs. On November 13th, 2021, his wallet was emptied.

About MetaMask

MetaMask was developed in 2016 by ConsenSys Labs. MetaMask describes itself as a "the leading self-custodial wallet. The safe and simple way to access blockchain applications and web3. Trusted by millions of users worldwide." The application is available and widely used as a mobile application and browser extension.

"Available as a browser extension and as a mobile app, MetaMask equips you with a key vault, secure login, token wallet, and token exchange—everything you need to manage your digital assets."

About Darkcryptomoon

Darkcryptomoon is a father who has worked for 10 years for the state as an attorney. His political views are largely democratic. As of December 23rd, 2021, he is still repaying his student loans and also has a mortgage on his house. He feels he's been defrauded by both his hospital and his government. He has been a Reddit user since at least February 20th, 2019.

He has used both Coinbase and GateHub. He still uses is heavily critical of the Coinbase cryptocurrency exchange due to a lack of support and an incident where he lost his seed phrase. He has investments in Bitcoin, Ethereum, GoodDollars, Algorand, Solana, and Flow, though he is critical of Ethereum. He is a very strong and persistent advocate and supporter of NFTs. He has investments in NBA Top Shot as his first NFT since late January 2021. He has since purchased others including PaniniNFT, a gambling ape NFT, and a crypto dad NFT. He doesn't believe that NFTs make sense as a tool for money laundering.

It's a way to prove ownership of a digital item. For instance, if you want to flex how much money you own, you may buy a Rolex or really expensive Nikes. But how do you do that in the metaverse? You buy a RTFKT pair of shoes (now part of Nike) or a BAYC/Crypto Punk. Another example would be some clubs and casinos in the MV require you to own one of their NFTs to get in and participate. Why not just require a regular old username and password? Because the NFTs accomplish the same thing, but with much more transparency (being on the Blockchain). Another example would be traditional basketball cards vs digital basketball cards (NFTs). Some people will never want to switch to a digital version if the collectable, because they need to be able to feel the card...similar to traditional books vs ebooks.

It seems like you are saying why even have the Blockchain involved, when you need a third party site to even really decipher the code anyways, since you have to trust the third party site..... I guess I'd say that since it's on the Blockchain, there are so many of these third party sites all saying the same thing, that it would have to be a massive conspiracy to somehow get all of them to unify in a single scam perfectly, which is extremely unlikely (similar to how hacking a Blockchain would be extremely difficult AFAIUI). Or maybe I'm just not understanding what exactly you're saying.... It just all seems like code... Online banking...online stock trading....online anything...it's all code... NFTs/blockchains just add more transparency, right? Is there a much better option that provides the same transparency we should be using?

"There's zero punishments for scammers and hackers... These decentralized chains incentivize thieves to come up with more and more hacks, because they get off with your money scot free. Sad stuff."

He stole 0.97 ETH from me. Looks to just be sitting there. He also stole some NFTs valued at about $2,300.

I have the Twitter account, website, email he used also, if needed. And yeah, there would be a reward if the funds were recovered, but I understand it's probably not enough to make it worthwhile for anyone. Thought I'd try anyways."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

• Known history of when and how the service was started.
• What problems does the company or service claim to solve?
• What marketing materials were used by the firm or business?
• Audits performed, and excerpts that may have been included.
• Business registration documents shown (fake or legitimate).
• How were people recruited to participate?
• Public warnings and announcements prior to the event.

Don't Include:

• Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
• Anything that wasn't reasonably knowable at the time of the event.

There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

The Reality

Self-custody of funds comes with increased responsibility and risks, including the risk of potentially losing all funds if the private keys are not kept secure.

What Happened

While the exact mechanism by which Darkcryptomoon's wallet was breached is unknown, we can determine from the blockchain that the theft of the Ethereum did not happen through a smart contract. Combined with the fact that Darkcryptomoon also reports multiple NFTs have gone missing from the same incident, the most likely cause of the exploit is an exposure of the seed phrase or private keys. Darkcryptomoon reports his MetaMask wallet was hacked and there is no indication that a hardware wallet was used, which allows for the possibility of both malware or entering the seed phrase into a fake wallet.

Key Event Timeline - Darkcryptomoon Ethereum NFT Con Man

Date	Event	Description
March 18th, 2021 11:26:16 PM MDT	First Ethereum Wallet Funding	Darkcryptomoon's ethereum wallet is used for the first time, with a micro-transfer of 0.00742926 ETH.
September 4th, 2021 9:23:35 AM MDT	Minting of One Day Punk	The first reported mint of an NFT for One Day Punk by Darkcryptomoon.
September 5th, 2021 11:03:24 PM MDT	Withdrawal from Coinbase	Darkcryptomoon withdraws an additional 0.36482706 ETH from Coinbase.
October 15th, 2021 8:02:11 AM MDT	Thief Creates Wallet Initially	The reported thief first transfers funds to their wallet.
October 27th, 2021 4:01:55 AM MDT	Funds Transferred From Binance	It appears that the thief has withdrawn a small quantity of funds from Binance, suggesting that they my have an account with KYC information.
November 2nd, 2021 3:28:26 PM MDT	First Remitano Transfer	The thief moves some funds (not related to this specific theft) into their Remitano account.
November 5th, 2021 9:57:24 PM MST	Assisting drdrew450	Darkcryptomoon assists another Reddit user drdrew450, who accidentally overpaid for an NFT.
November 13th, 2021 9:38:16 AM MST	Theft Transaction	A blockchain transaction transfers 0.969052970191778852 ETH to the reported thief address.
November 17th, 2021 1:18:34 AM MST	Reddit Bounty Offer Posted	Darkcryptomoon posts details of the theft on Reddit, and additionally offers a "reward if the funds were recovered". It does not appear that anyone responded to his, post except another scammer.
November 24th, 2021 2:28:55 PM MST	Funds Moved To Another Wallet	The thief moves the ethereum from the main wallet to their Remitano wallet.
November 26th, 2021 4:01:23 PM MST	Final Transfer To Remitano	The thief moves the funds into a Remitano service wallet address.
December 31st, 2021 10:13:36 PM MST	Speaking Out Against Ethereum	Darkcryptomoon responds to a post about Solana with a heavy bash against Ethereum. In this post, he reveals that the NFTs taken were all ethereum-based.
March 3rd, 2022 6:44:14 PM MST	Response To Scammer	Darkcryptomoon responds to the fraudster.
March 5th, 2022 5:41:56 PM MST	Warning To Billyfudpucker	Darkcryptomoon responds to Billyfudpucker's post to warn him about not responding to any private messages from individuals as they are likely also scammers.
July 16th, 2022 11:05:34 PM MDT	Response To Another Theft Case	Darkcryptomoon describes the thefts as "a major con of decentralization. Endless new scams. Endless new exploits. Endless new hacks."

Total Amount Lost

Darkcryptomoon described his losses as 0.97 ETH in addition to $2,300 worth of NFTs. A blockchain transfer for 0.969052970191778852 ETH to the reported thief's address was located.

He stole 0.97 ETH from me. Looks to just be sitting there. He also stole some NFTs valued at about $2,300.

The closing market price for ethereum on November 13th, 2021 was $4,651.46 USD. This approximates the value of the ethereum taken at $4,507.51.

The NFTs are described by Darkcryptomoon as ethereum-based with a value of "about $2,300".

Combining the ethereum with the reported $2,300 in NFTs, the total amount lost has been estimated at $7,000 USD.

Immediate Reactions

Very little is known about the immediate reaction of Darkcryptomoon. He reports having filed a report with the FBI through their "IC3" interface, however the specific timing of that is presently unknown.

"My MM got hacked. Filed a report with the FBI, never heard anything back. It's a hackers/scammers paradise right now...no one can do anything as far as I found.... Just a bunch of people saying they want to help, but trying to scam me for even more of my money."

Darkcryptomoon posted to Reddit 4 days after the theft transaction, offering a bounty to help trace the funds. He reports receiving no legitimate offers to help, and multiple scams from people claiming they want to assist him.

Ultimate Outcome

Since the incident, Darkcryptomoon has repeatedly spoken out about Ethereum and decentralization in general. He has expressed preference for centralized chains and Proof of Stake.

Sorry OP.... Many many people have had the same thing happen. It's a major con of decentralization. Endless new scams. Endless new exploits. Endless new hacks. Because there's no way to punish these evil people they will just come up with more ways to steal people's money and there's nothing anyone can do except know all the different ways to protect yourself at all times no matter the new ones that come out. Ethereum is becoming a wasteland.

Ethereum has some major problems that people know about, but choosing to not pay heed to. 1) The ridiculous gas fees. 2) The complete lack of any deterrents or punishments for scammers. There's absolutely nothing anyone can do if a scammer steals all of your ETH/Eth-based NFTs... So there's a big incentive to keep coming up with more elaborate and believable scams. It's not just giving up your seed phrase anymore, and the scams will constantly become more numerous and nefarious. Ethereum will also play a part in the crypto community, but when more adoption happens, I think people will ultimately prefer a more centralized chain that can offer more support and customer service, along with near zero fees, instead of upwards of $4,000 in fees you have with peak gas wars on Ethereum. Ethereum badly needs to be dethroned, and Solana is a top contender (along with Flow and Cardano IMO).

Darkcryptomoon has spent some time reaching out and assisting other fraud victims, warning them not to respond to private messages.

Anyone DMing you offering to help or telling you to contact "this person" is trying to scam you again. There is not going to be anyone that can actually help you, I know from first hand experience. File a report with the FBI (https://www.ic3.gov/) and try and track the movements of your stolen crypto...when they move it to an exchange,.contact the exchange and have the crypto frozen (most likely they will ignore you).

There does not appear to have been any response to their bounty thread. Darkcryptomoon reports that there was no response from the FBI.

Total Amount Recovered

As of July 17th, 2022, it does not appear that any recovery has been obtained.

Ongoing Developments

There does not appear to be any investigation nor recovery in progress. Darkcryptomoon did not respond to a request for further information via Reddit.

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.