Blessed Ice Phishing, Fisherman on the Blockchain Ice

Patron of cryptocurrency wallets, signatures given without reading, and approvals that never expire.

Life

On 16 February 2022 Microsoft researchers described ice phishing: instead of stealing the private key, the attacker gets the victim to sign a transaction that authorises them to spend their tokens. Among the examples was the December 2021 attack on BadgerDAO, which cost users over a hundred million dollars. Ice fishing where the fish holds out the hook.

Prayer

O Blessed Ice Phishing, who fishes with the bait of a signature, teach us to read what we approve. Amen.

How to celebrate

Celebrated by revoking your wallet's forgotten approvals and distrusting every "Approve" button.

Sign on thin ice, and your wallet goes under.