Balancer exchange fake airdrop - BalancerLP.com - SCAM!
There is a fake airdrop being prepared by threat actors, who are very persistent. Saw attacks against 1inch, pancakeswap and uniswap so far. The uniswap attack resulted in more than 8 M worth of tokens stolen.
The scammers send tokens, with a bogus approval. If a user gets curios and tries to "redeem" their fake airdrop, they get their wallet's contents drained.
Remember, there is no airdrop. Be careful! (edited) This is how the attack works:
Phisher airdropped malicious tokens to Balancer Labs LPs’ wallets. The name of the token directed users to a malicious interface that claimed the users could swap these tokens for BAL. (balancerlp.com is contained in the airdropped tokens). The scammers are well funded and burn about 100 ETH just for fees to spam!
The fake page generates a setApprovalForAll transaction, which, if approved by the user in their wallet, gave the attacker the ability to redeem all of the user’s BAL tokens for their full underlying value!!!
This is a good reminder for wallets and other interfaces to be vigilant about hiding spam and tokens with URLs in their name.
Balancer labs operates primarily under the domain http://balancer.fi/
Any "Airdrops" that direct you to unofficial domains are undoubtfully phishing attempts.
📚 The real Balancer website is http://balancer.fi/
📌 Bookmark the URL and open it from there
👀 Remember, do NOT use Google or bing to open Balancer, as scammers pay for GoogleAds, which get shown on top.
💸 There is no Airdrop, Synchronization, Rectification, Remediation, Fee reduction etc. All those sites are designed to steal your assets!
Stay frosty!