New Research Reveals Thousands of Fake Smart Contracts

A recent study highlights a clever phishing tactic targeting crypto wallet users. Researchers identified 4,224 smart contracts across Ethereum, BNB Smart Chain, Avalanche, and Polygon that trick users by providing a misleading preview of their transactions. By simulating a false outcome, these contracts appear to show a small gain while actually draining the user's funds during the real transaction.

The research linked this activity to roughly 5,700 victim addresses and about $3.48 million in losses. These contracts often take advantage of how wallets calculate balance changes, showing a positive result in the preview while executing a completely different action once the user signs the transaction. Some methods rely on time based triggers or gas limit adjustments to switch the transaction behavior at the last second.

While these findings offer a warning about the limits of wallet simulation tools, they are not yet peer reviewed. The authors suggest that users should remain cautious and that wallet providers could improve safety by displaying the gross amount leaving a wallet rather than just the final net balance.

For now, the best defense is to always treat transaction previews with healthy skepticism. If a transaction looks like it is gifting you money or behaving in an unexpected way, it is safer to double check the destination and the contract address before hitting confirm.