SlowMist: Multiple incidents of stETH being stolen and cross-chain transferred to the Blast mainnet have been discovered, victims' mnemonic phrases/private keys may have been leaked

Founder of SlowMist, Yu Xian, posted on the X platform today that SlowMist and MistTrack have received at least four cases of stETH being stolen and cross-chain transferred to the Blast mainnet. The common feature is that a small amount of ETH transaction fee is sent from an address with obvious traces (including exchanges) to the stolen address, then stETH is cross-chained to the Blast mainnet for subsequent transfers. Finally, a small amount of remaining ETH in the victim's address is transferred to a different ETH address. It is known that losses exceed 100 stETH, indicating it may be a collective event. The mnemonic phrases/private keys of these victims must have been leaked, allowing attackers to lurk and initiate attacks on the Blast mainnet.

In previous news, Scam Sniffer monitoring showed that an address lost over 10 BTC pledged on Aave as well as some PANDORA due to interaction (clicking on signature authorization) with a fake Blast airdrop website. The total loss amounted to approximately $717,817 USD.