Hacker News Reader

Thanks for the details.

"Attacker sends a fake transaction of crypto from the user's address to the phishing address"

Can you explain what you mean by this, how this works?

Yeah it seems insane to me too, but some kinds of transactions don't require the private key. https://www.coinbase.com/blog/zero-transfer-phishing-part-1-...

The attacker basically calls Transfer(From your address, to phishing address, quantity 0) They can't actually transfer any crypto because your approval for that token is zero. But they can technically transfer zero tokens from your address to another one. Then some wallet interfaces pick this up and display it as a transfer.

Reply on news.ycombinator.com