Highlighted by @ScamSniffer on X (Twitter), one very unlucky holder fell victim to a recent phishing attack that resulted in the loss of some $24.23 million worth of stETH and rETH.

stETH and rETH refer to the liquid-staking derivative tokens associated with Lido Finance and Rocket Pool - Two of the largest projects in the Ethereum-LSD vertical.

Reports indicate that the holder in question had inadvertently fallen for a phishing scam which allowed the malicious actor to transfer large sums of the tokens from the victim’s wallet to their own. The attacker’s wallet appears to be labeled as a “Fake_phishing” wallet on Etherscan.

This harrowing story serves as a clear reminder of the dangers that still exist in the cryptocurrency landscape. Self-custody, though a boon in many respects, also comes with risks and users should exercise extreme caution when permissioning their crypto wallets anywhere and on any site.