ChatGPT Recommendation Leads to Phishing Loss for Crypto User

A cryptocurrency user known as r_ocky.eth lost $2500 due to a recommendation from ChatGPT, which directed him to a fraudulent site while developing a bot for the meme-token platform Pump.fun on Solana. This incident was highlighted by experts at SlowMist.

看了下，这位朋友的钱包还真是被 AI 给“黑”了…用 GPT 给出的代码来写 bot，没想到 GPT 给的代码是带后门的，会将私钥发给钓鱼网站…?‍?

玩 GPT/Claude 等 LLM 时，一定要注意，这些 LLM 存在普遍性欺骗行为。之前提过 AI 投毒攻击，现在这起算是针对 Crypto 行业的真实攻击案例了。 https://t.co/N9o8dPE18C

— Cos(余弦)?‍?️ (@evilcos) November 22, 2024

“After analyzing the wallet, I realized it was indeed ‘hacked’ by AI. I used the code provided by GPT to write a bot. I did not expect that the code given by the chatbot would have a backdoor and send the private key to a phishing site,” commented the researcher known as Cos.

He emphasized that when working with LLM, one must be aware of the potential for attacks. There is now a real case of funds being stolen from a crypto user.

The victim showed part of the code where it was necessary to send a private key to the API as recommended by ChatGPT. 

This is a part of the code where you are sending a private key in API which is recommended by @OpenAI . Of course, I’ve made the mistake of using my main @Solana wallet but when you are in a rush to do so many things at the same time it is easy to make a mistake. ? pic.twitter.com/tRhTgjMzmm

— r_ocky.eth ? (@r_cky0) November 21, 2024

“Of course, I made a mistake by using my main Solana wallet. But when you are in a rush to do many things at once, it is easy to make an error,” he noted.

The fraudster acted extremely quickly. As soon as r_ocky.eth used the API, the assets were immediately transferred to another wallet. The suspected address of the perpetrator holds 5.72 SOL and 141,950 USDC. 

Previously, a user lost 4064 BTC ($238 million) due to a hacking attack.

Earlier this year, criminals stole $1.6 billion in cryptocurrencies, shifting their focus to centralized exchanges, as noted by Chainalysis.