Runeswap, which claims to hold $24 million in liquidity reserves, allegedly scammed a user out of 33 XMR and then attempted to defraud them further through a fake refund page requiring a Web3 wallet connection avoid using the site.
Source:
runeswap.io
runeswap@proton.me
https://t.me/runeswapofficial
Letter of guarantee (LoG) : NO
SimpleX Chat Support : NO
Bitcointalk.org [ANN] Thread : NO
Note to the community from Trêvoid:
The "Recovery" trap is fraudsters often follow up an initial theft with a secondary social engineering attack. By providing a "refund claim page," they target the victim's desperation to recover lost funds. Wallet Drainer mechanism is when the user connects a Web3 wallet (like MetaMask or Rabby) to the fake refund page, they are often asked to sign a malicious transaction (e.g., setApprovalForAll or a permit signature). This grants the attacker permission to withdraw the remaining assets in the victim's wallet.
Best regards,
— Trêvoid
Source:
runeswap.io
runeswap@proton.me
https://t.me/runeswapofficial
Letter of guarantee (LoG) : NO
SimpleX Chat Support : NO
Bitcointalk.org [ANN] Thread : NO
33 $XMR SCAMMED BY @runeswap_io They balmed it on a system upgrade and told him to claim it via smart contracts. He drained his wallet to try it for the lols. Obviously didnt work AVOID
Note to the community from Trêvoid:
The "Recovery" trap is fraudsters often follow up an initial theft with a secondary social engineering attack. By providing a "refund claim page," they target the victim's desperation to recover lost funds. Wallet Drainer mechanism is when the user connects a Web3 wallet (like MetaMask or Rabby) to the fake refund page, they are often asked to sign a malicious transaction (e.g., setApprovalForAll or a permit signature). This grants the attacker permission to withdraw the remaining assets in the victim's wallet.
Security Warning Never connect a wallet to any site claiming to offer a "refund" or "recovery" for stolen crypto.
- No central authority: DeFi protocols are non-custodial; there is no "customer support" that can reverse transactions or initiate refunds from a smart contract.
- Phishing: These pages are designed to harvest credentials or trick users into signing away access to their private keys or wallet permissions.
Best regards,
— Trêvoid