{"id":167964,"date":"2023-10-04T12:33:10","date_gmt":"2023-10-04T07:03:10","guid":{"rendered":"https:\/\/dripp.zone\/news\/?p=167964"},"modified":"2023-10-04T12:33:10","modified_gmt":"2023-10-04T07:03:10","slug":"friend-tech-users-blame-sim-swaps-after-more-than-100-eth-drained-in-a-week-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/friend-tech-users-blame-sim-swaps-after-more-than-100-eth-drained-in-a-week-crypto-news\/","title":{"rendered":"Friend.tech users blame SIM swaps after more than 100 ETH drained in a week &#8211; Crypto News"},"content":{"rendered":"<div data-v-ff33fc9a=\"\">\n<p>Friend.tech users are warning of possible SIM-swap attacks after a recent spate of supposed hacks resulting in nearly 109 Ether (<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/ethereum-price\">ETH<\/a>) worth around $178,000 being drained from four users in under a week.<\/p>\n<p>On Sept. 30, the X (formerly Twitter) user known as \u201cfroggie.eth\u201d <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/brypto_\/status\/1708055944360255600\">warned<\/a> their Friend.tech account was <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/crypto-sim-swap-how-easy-is-sim-swap-crypto-hack\">SIM-swapped<\/a> \u2014 where exploiters gain control of a user\u2019s mobile number to intercept two-factor authentication codes, then used to access accounts \u2014 and subsequently drained of over 20 ETH.<\/p>\n<p>Days later, on Oct. 3, a string of Friend.tech users reported similar incidents, with musician Daren Broxmeyer saying he was SIM-swapped and drained of 22 ETH.<\/p>\n<p>His phone was earlier \u201cspammed with phone calls,\u201d which he believed was to force him to miss a text from his service provider warning him that someone was trying to access his account.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">I was just SIM swapped and robbed of 22 ETH via <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/friendtech?ref_src=twsrc%5Etfw\">@friendtech<\/a><\/p>\n<p>The 34 of my own keys that I owned were sold, rugging anyone who held my key, all the other keys I owned were sold, and the rest of the ETH in my wallet was drained.<\/p>\n<p>If your Twitter account is doxxed to your real\u2026 <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/5wA86mjYEG\">pic.twitter.com\/5wA86mjYEG<\/a><\/p>\n<p>\u2014 daren (friend, friend) (@darengb) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/darengb\/status\/1709021872178729409?ref_src=twsrc%5Etfw\">October 3, 2023<\/a><\/p><\/blockquote>\n<p>The same day another user, \u201cdipper,\u201d also <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/d1pp3r__\/status\/1708951614227173589\">said<\/a> their account was compromised, adding they have \u201cno idea\u201d how exploiters could hack their account, as they use strong passwords.<\/p>\n<p>The fourth user, \u201cdigging4doge,\u201d was drained of around 60 ETH after falling for a phishing scam that tricked them into sharing a login code.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">Friendtech user <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/digging4doge?ref_src=twsrc%5Etfw\">@digging4doge<\/a> just got drained to the tune of ~60 eth worth of keys.<\/p>\n<p>About an hour ago, he received a text informing him that a number change had been requested for his account.<\/p>\n<p>He had two hours to respond or the request would be auto approved. This was, of\u2026 <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/L21Hr041kP\">pic.twitter.com\/L21Hr041kP<\/a><\/p>\n<p>\u2014 quit (,) (@0xQuit) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/0xQuit\/status\/1709391410783195384?ref_src=twsrc%5Etfw\">October 4, 2023<\/a><\/p><\/blockquote>\n<p>Crypto investment firm Manifold Trading explained that any hacker gaining access to a Friend.tech account is then able to \u201crug the whole account.\u201d<\/p>\n<p>Assuming that a third of Friend.tech accounts are connected to phone numbers, around $20 million is at risk of being exploited through <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/crypto-use-cases-coinbase-jesse-pollack\">Friend.tech user-focused exploits<\/a>, they said.<\/p>\n<p><strong><em>Related: <\/em><\/strong><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/friend-tech-look-alike-alpha-bitcoin-network\"><strong><em>Friend.tech look-alike \u2018Alpha\u2019 emerges on Bitcoin network<\/em><\/strong><\/a><\/p>\n<p>Manifold also suggested that, technically, all of Friend.tech is at risk due to how the platform\u2019s security is set up, and solving the issues \u201cshould honestly be the number 1 priority.\u201d<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">If any hacker gains access to a FriendTech account via simswap\/email hack, they can rug the whole account<\/p>\n<p>If you assume 1\/3 of FriendTech accounts are connected to phone numbers, that&#8217;s $20M at risk from sim-swaps<\/p>\n<p>FriendTech&#8217;s current setup also technically allows a rogue dev\u2026 <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/XgodMNSh2l\">https:\/\/t.co\/XgodMNSh2l<\/a><\/p>\n<p>\u2014 Manifold (@ManifoldTrading) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/ManifoldTrading\/status\/1708975441539744050?ref_src=twsrc%5Etfw\">October 2, 2023<\/a><\/p><\/blockquote>\n<p>Manifold suggested Friend.tech allow users to add 2FA to logins, key decryptions and transactions.<\/p>\n<p>Users should also be given the option to change the login method from a number to email and allow for third-party wallets to be used.<\/p>\n<p>High-profile crypto figures have previously been successfully SIM-swapped, with their accounts used to carry out phishing attacks, such as Ethereum co-founder Vitalik Buterin\u2019s <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/vitalik-buterin-reveals-x-account-hack-was-caused-by-sim-swap-attack\">X account in September<\/a>.<\/p>\n<p>Cointelegraph contacted Friend.tech for comment but did not immediately receive a response.<\/p>\n<p><strong><em>Magazine: <\/em><\/strong><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/magazine\/blockchain-detectives-mt-gox-collapse-birth-chainalysis\/\"><strong><em>Blockchain detectives \u2014 Mt. Gox collapse saw birth of Chainalysis<\/em><\/strong><\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Friend.tech users are warning of possible SIM-swap attacks after a recent spate of supposed hacks resulting in nearly 109 Ether (ETH) worth around $178,000 being drained from four users in under a week. On Sept. 30, the X (formerly Twitter) user known as \u201cfroggie.eth\u201d warned their Friend.tech account was SIM-swapped \u2014 where exploiters gain control [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":167965,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[235,203,210,234,231,232,237,238,236,233],"class_list":["post-167964","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blockchain","tag-bitcoin","tag-crypto-currency","tag-elon-musk","tag-ethereum","tag-hyperledger","tag-ibm","tag-mining","tag-nodes","tag-spacex","tag-tesla"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/167964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=167964"}],"version-history":[{"count":2,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/167964\/revisions"}],"predecessor-version":[{"id":167967,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/167964\/revisions\/167967"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/167965"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=167964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=167964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=167964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}