NFTs can contain code that messes with your Metamask wallet. SVG NFTs can contain JavaScript. Now, you might think any attention would be paid to security.
What happen ?
Somebody set up us the rug.
We get signal.
What !
Main screen turn on.
It's you !!
How are you degentlemen !!
All your ape are belong to us.
You are on the way to destitution.
What you say !!
You have no chance to survive make your time.
Ha ha ha ha ...
Captain !!
Take off every 'SCAM'!!
You know what you doing.
Move 'SCAM'.
For great injustice.
Maybe don’t install shady crypto extensions next time. Or don’t log into your wallet in public WiFi just so you can accidentally show off to the person sitting behind you at Starbucks.
Quite often it’s another payload that installed the browser extension on the user’s host.
SEO poisoning or malicious adverts, for instance posing as legitimate tools like FileZilla etc, leads to a malicious payload (loader, RAT, etc) that in turn downloads and installs the malicious browser extension.
Install adblockers. Genuinely. It’s insane how many adverts on Google and Bing etc are straight up malicious. It’s been a problem for years now.
While this is good advice, as the local ButtcoinMaximalist(tm, OG do not steal) I think this is only pleb protection, you know for the normal people. Butters should do more, be your own bank as they say. So clearly it is ops own fault that he lost his money, he should have setup a IDS which should have warned his SOC that something was wrong and then they should have taken action. Be your own bank! ;)
But yeah it is amazing how a standard bank protection like 'it is not possible to transfer huge amounts of cash/assets without additional checks and balances' would simply stop most of this crime. But that requires centralization. (Google is also bad, and getting worse, I now double check download urls for tools via secondary sources and half the time also virustotal the exe files. But im paranoid).
Maybe off topic, but can you realistically "steal" crypto? It's just a system where you need a key to authorize transactions. It's not tied to a person, it's tied to a key.
It's like, "who you are" part of authentication doesn't exist, so therefore who you are wouldn't define ownership.
Can you really "steal" money? It's just paper with numbers written on it, just because the person who possesses the paper has changed doesn't mean the paper has.
Yeah, but if you steal my money, the centralized state can punish you and demand restitution. It's like when Seth Greene had his NFT phished, he had no legal recourse to get it back.
Has there been any case where people stealing crypto got them in trouble? The only thing I've seen is where people create rug pulls and they get charged with fraud, so legal repercussions against an organization.
there used to be coiners who advocated precisely this theory of ownership, but we tend to hear these days from the captains of industry who desperately seek out the statist boot to lick when their apes are cryptographically reassigned