Hayden Adams has exposed a new scam involving the Ethereum Name Service (ENS) that puts users' cryptos at risk by impersonating legitimate ENS wallet addresses. The scam creates a misleading ENS match that could lead users to transfer funds to the scammer's address, highlighting concerns in the cryp...
Hayden Adams has exposed a new scam involving the Ethereum Name Service (ENS) that puts users' cryptos at risk by impersonating legitimate ENS wallet addresses. The scam creates a misleading ENS match that could lead users to transfer funds to the scammer's address, highlighting concerns in the crypto community about transaction ease and anonymity benefiting wrongdoers. ENS lead developer Nick Johnson advocates for a cautious approach towards autocompleting names in user interfaces, and the crypto industry continues to face vulnerabilities and significant losses from various scams and exploits.
Hayden Adams, the founder of decentralized exchange Uniswap, has exposed a new scam that capitalizes on the Ethereum Name Service (ENS ) to deceive unsuspecting individuals. The scam involves impersonating legitimate ENS wallet addresses, eventually putting users’ cryptos at risk. Adams took to X (formerly Twitter) to alert about scammers who had ingeniously duplicated and registered his Ethereum wallet address as an ENS domain ending with .eth.
HOW BAD ACTORS CONDUCT CRYPTO SCAM WITH ENS WALLET IMPERSONATION: The fraudulent act creates a misleading ENS match that appears as the top search result in certain user interfaces when a user enters Adams’ wallet address. The deceptive similarity could indeed lead users to transfer funds to the scammer’s address, mistaking it for the intended recipient’s. The scam highlights a concern in the crypto community about how transaction ease and anonymity can benefit wrongdoers. Adams urges the need for user interfaces to have safeguards. These should filter out deceptive addresses to reduce the risk of losses. Echoing Adams’ concerns, ENS lead developer and founder Nick Johnson weighed in on the issue, advocating for a cautious approach towards autocompleting names in user interfaces.
"IMO, interfaces shouldn’t autocomplete names at all; it’s far too dangerous. I think we advise against it in our UX guidelines,” Johnson said.
The sentiment is shared by DeFi enthusiast Alex, who questions the lack of preventative measures from ENS against such frauds. This incident is part of a larger trend of scams plaguing the crypto industry. These include advanced email phishing campaigns posing as well-known crypto brands and honeypot schemes on social media. Indeed, the crypto space is full of vulnerabilities that scammers take advantage of. In January alone, nearly $600,000 was swindled from victims through such phishing operations. In 2023, losses from various scams and exploits exceeded $1.8 billion, encompassing code exploits, private key compromises, exit scams, and phishing attacks.