Researchers just uncovered 4,200 malicious smart contracts that successfully tricked 5,700 victims into signing away their crypto

What happened

Researchers uncovered 4,224 malicious smart contracts that successfully tricked 5,742 crypto addresses into signing away their funds, confirming a large‑scale phishing operation on blockchain platforms.

Confirmed

Global impact / market context

The discovery shows that attackers can exploit poorly audited code to steal assets from many users, highlighting a serious security gap that could erode confidence in decentralized finance applications.

Analyst inference

The incident spans major chains such as Ethereum, Binance Smart Chain, and Avalanche, reminding investors that vulnerabilities on popular networks can quickly affect token prices and overall market sentiment.

Analyst inference

What to watch

1. The rate at which new malicious contracts appear on each blockchain, which signals how quickly attackers adapt to platform upgrades and security measures. Analyst inference
2. Responses from wallet providers and DeFi projects, such as added warnings or contract‑verification tools, that could limit future victim exposure. Proposed
3. Industry or regulatory moves toward stricter smart‑contract auditing standards, which may change risk assessments for investors in affected tokens. Proposed

Affected assets

• AVAX — Avalanche
• TWT — Trust Wallet
• BNB — BNB
• ETH — Ethereum

Evidence

• cryptoslate.com