Dormant Web3 Wallet Drained of $908K USDC in Sophisticated Long-Game Phishing Attack

A meticulously planned phishing attack has resulted in the theft of $908,551 worth of USDC from a previously inactive Web3 wallet. Blockchain security firm Scam Sniffer reports the attacker patiently waited 458 days after the victim initially signed a malicious transaction approval before executing the heist within hours of a fresh deposit.

This incident highlights persistent security gaps in decentralized finance protocols. "ALERT: A victim lost $908,551 due to a phishing approval signed 458 days ago," Scam Sniffer warned in an August 2, 2025 social media post. The platform stressed the critical need for users to routinely audit and revoke outdated wallet permissions.

On-chain analysis reveals the attacker's strategic patience. After monitoring the compromised wallet for nearly 18 months of inactivity, the exploiter swiftly moved to drain the funds when 908,551.976006 USDC was deposited 30 days prior to the theft.