Weaponized Trading Bots Drain $1M From Crypto Users via AI-Generated YouTube Scam

A sophisticated cryptocurrency scam has defrauded users of over $1 million by exploiting malicious smart contracts disguised as profitable arbitrage bots. The scam, detailed in a recent SentinelLABS report, leverages a multi-pronged approach to deceive victims.

The core of the operation involves AI-generated YouTube tutorials promoting a seemingly legitimate trading bot. These videos, often found on aged accounts with unrelated content and manipulated comments, create a false sense of credibility. Some videos are even unlisted, suggesting distribution via private channels like Telegram. The videos feature AI-generated avatars and voices, minimizing production costs and maximizing content output.

Victims are guided through the process of deploying a smart contract using Remix, a popular IDE. They are instructed to fund the contract with ETH and activate a “Start()” function. However, this contract is designed to secretly transfer funds to a hidden wallet controlled by the scammers.

Sophisticated obfuscation techniques, including XOR encryption and large decimal-to-hex conversions, mask the destination address, making fund recovery exceedingly difficult. One particularly successful address, 0x8725…6831, linked to a YouTube tutorial by @Jazz_Braze, amassed approximately $902,000 from unsuspecting users. This video alone boasts over 387,000 views.

The smart contract is cleverly designed with fallback mechanisms that allow the attackers to withdraw deposited funds even if the victim doesn’t explicitly activate the main function. While most attacker wallets received smaller sums, the Jazz_Braze address stands out, highlighting the potential scale of the operation. Stolen funds were subsequently moved to secondary addresses, hindering tracking efforts.

SentinelLABS emphasizes the importance of caution, urging users to avoid deploying “free bots” advertised on social media, particularly those requiring manual smart contract deployment. The firm stresses the need for thorough code review, even for testnet deployments, as these techniques are easily transferable across different blockchains. The significant financial losses underscore the evolving sophistication of cryptocurrency scams and the need for heightened vigilance.