The sneaky multisig scam. Newbies Beware!

The sneaky multisig scam. Newbies Beware!

By fred_nurk | pragprog | 22 Dec 2024


Here I leave you with the 12 word phrase for a Tron wallet with more than 8,000 USDT in it, it is originally an okx wallet but it can also be imported into other multichain wallets such as Trust wallet:

check broom dinosaur stool harsh hurdle morning solve barely umbrella crumble naive

 

And yes, it is ironic that the last word is naive but before you think I am insane let me explain. In the trenches you see a lot of wacky stuff. Luckily most scams are obvious but this one not so much so I decided to write a bit about it when I saw it in the wild. This scam is actually quite tired out like for example this Facebook post but it might still catch newer crypto enthusiasts off guard. It sounds too good to be true. Remember that in the crypto world if something sounds to good to be true it probably is.

 

So how does this work? It's actually quite simple but hard to spot if you don't know what is going on. This scam usually involves the Tron blockchain but can theoretically can be done on any blockchain that allows multisig wallets. Multisig is a way to segment the permissions on wallet so that multi people can handle it without having to trust each other. It is also a way of mitigating risk as it removes the single point of failure if the seed phrase is compromised.

 

Tron multisig architecture 

As I stated earlier, I have seen this scam more commonly on Tron so I will focus on that blockchain. The Tron permission scheme is divided into three, the owner, the active and the witness permission. Each has its own set of priveledges with "owner" being the highest and the "witness" being a custom usually lower priviledged key. So what this scam does is that the scammers generate a multisig tron wallet, keeping the owner wallet's keys to themselves and posting a view only "witness wallet's keys. So when you import the wallet you might in fact see that they weren't lying when they stated they have 10k USDT and they only need enough to cover the fees to pull it out. They might even say they trust in you and that you can withdraw your part of the funds yourself only to find out that you have no control over them.

 

Here lastly. I leave you with a Tronscan of another similar scam wallet where you can see that it warns you that the owner is a different wallet.

How do you rate this article?

64


fred_nurk
fred_nurk

I like programming and this whole new blockchain world.


pragprog
pragprog

This is a side project from my main blog (termuxuser01.blogspot.com) mainly dedicated to my exploracion into blockchain technology and the new fronteirs it opens. I like learning and sharing what I find in the digital sea.

Publish0x

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.