reply on: I need help (warning shitcoins may be involved) \ stacker news ~mostly

pull down to refresh

226 sats \ 11 replies \ @ZezzebbulTheMysterious 6 Mar \ on: I need help (warning shitcoins may be involved) mostly_harmless

Hi! I think you may have been scammed. They are first getting you to interact with an EVM (ethereum compat) chain called zcore. Zcore appears to be a cheap knockoff ethereum clone.

I am guessing they are giving you fake 'bitcoin' which are something like ERC-20 tokens on a zcore, and trying to make you think this is real Bitcoin on the Bitcoin blockchain.

There is no reason the smart contract that is powering whatever scam token even permits sending. If you are willing to share addresses, we might be able to determine more.

When you switch addresses like that, it causes the wallet to refresh the token balances.

I suspect the attacker is not related to zcore, they are simply using their testnet to scam people.

10 sats \ 1 reply \ @BlokchainB OP 6 Mar

Yeah I knew my funds were gone just wanted to see if this was the end and it appears so. It stinks but I think I can finally move on from all this

0 sats \ 0 replies \ @ZezzebbulTheMysterious 6 Mar

Would you share a screenshot of the wallet? Maybe we could see. Redact the addresses / amount if you dont wish to share the details.

0 sats \ 8 replies \ @BlokchainB OP 6 Mar

Bitcoin: bc1qk6vsdyaeglmmr33yutr25fnl7j3fxqspm75m4u

Ethereum: 0x22c4ccC059393495cF79b60b34Ed3C5A87b4dbAa

25.1k sats \ 7 replies \ @ZezzebbulTheMysterious 7 Mar

Thank you for sharing. I can see that 3 days ago someone transferred 1.84 ZCR coins on testnet to your wallet (scammer?).

These are "ZCR" coins, but the scammer instructed you to override the label on these coins with "BTC".

So you own 1.84 ZCR testnet coins, but the Coinbase wallet reports them as "BTC". but this is just a text label. They are not ERC-20s, but the native gas coin of zcore testnet.

That bitcoin address is empty. I think the coin is gone, very sorry.

0 sats \ 2 replies \ @BlokchainB OP 7 Mar

Thanks for going the extra mile and explaining the this to me. I paid you the bounty.

Now I have a much better understanding of how they pulled this nonsense off.

100 sats \ 1 reply \ @ZezzebbulTheMysterious 7 Mar

Thank you for the bounty, and thank you for giving the community the opportunity to document this attack -- and hopefully it is avoided in future.

There should be enough details here that it will show up for a search about:

hillstone global testnet zcore BTC scam

0 sats \ 0 replies \ @BlokchainB OP 7 Mar

That is part of the reason I posted on SN I wanted to have a more technical discussion here on like what happened how can this company send my these fake ass tokens but yet trying to convince me they paid me back.

If you search the web about this company nothing shows up! And they are still Active meaning they are still working the scam!

0 sats \ 3 replies \ @ek 7 Mar freebie

That bitcoin address is empty. I think the coin is gone, very sorry.

It never arrived on that address though. No transactions were seen involving this address.

If @BlokchainB really send bitcoin from mainnet (which hold value unlike testnet coins), his wallet shouldn't even allow to create such a transaction to some other net. Addresses are prefixed with their network (mainnet, testnet, regtest, signet) and you can definitely not send something from bitcoin mainnet to some ZCR testnet.

So I am still confused what exactly happened here. @BlokchainB, is that really the address to which you sent your coins or is this some deposit address you are getting now?

How did you send your coins?

Here, you'll need to delete the custom network that was previously added.

Maybe this was a cover-up for them. Maybe you can't find the actual deposit address in the Coinbase wallet anymore. But the wallet from which you sent the coins should still show it?