.svg)
Hackers are targeting holders of World Liberty Financial’s WLFI token with coordinated phishing campaigns that exploit wallet delegation features on Ethereum. CoinDesk reported that victims were lured into authorizing malicious delegate contracts that redirected funds to attacker addresses once tokens were deposited. Community posts described frantic attempts to rescue allocations after the token’s trading debut increased visibility and drew in opportunistic scammers.
Security researchers say the attacks piggyback on mechanics introduced by recent Ethereum upgrades that let externally owned accounts act temporarily like smart contract wallets. When abused by fake interfaces or spoofed approvals, users can sign permissions that hand control of assets to the attacker. SlowMist’s founder pointed to a known pattern tied to EIP-7702 style wallet delegation that has been used across multiple phishing kits.
Analytics firm Bubblemaps also flagged cloned and look-alike WLFI contracts spreading across Telegram and X. These copies helped scammers funnel buyers into counterfeit liquidity pools or booby-trapped approval flows. Mirror coverage summarized growing reports of bundled clones and warned that direct messages from impostor accounts have been a major lure during the token’s volatile first week.
Project channels urged holders to double check contract addresses, revoke risky approvals, and avoid links shared in private messages. They reiterated that official support will not contact users to request seed phrases or urgent transactions. With WLFI activity elevated and attention high, investigators expect phishing waves to continue in the near term. Users are advised to stick to verified links, use approval managers, and move assets to fresh wallets if they suspect compromise.
.png)
.png)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)