Payload-Based Transaction Phishing on Ethereum Causes Over $341 Million in Losses

Payload-based transaction phishing (PTXPHISH) is a sophisticated form of phishing that has recently surfaced on the Ethereum platform, surpassing earlier, simpler phishing methods. In 2023, this threat has caused losses exceeding $341.9 million, with a staggering 130,637 phishing transactions identified over a 300-day period. Researchers from Zhejiang University conducted a comprehensive study, creating the first ground-truth dataset of 5,000 phishing transactions to analyze this emerging threat.

The study categorized phishing tactics into four primary categories and eleven sub-categories, providing a detailed understanding of how these attacks operate. A rule-based multi-dimensional detection approach was proposed, achieving an impressive F1-score of over 99% while processing each block in an average of 390 milliseconds. This research is crucial as it sheds light on the evolving nature of phishing attacks in the cryptocurrency space.

Understanding the Impact of PTXPHISH

Daily, scammers consume approximately 13.4 ETH, which represents 12.5% of the total Ethereum gas, to execute address poisoning scams. The analysis revealed that the top five phishing organizations are responsible for 40.7% of all losses, indicating a concentrated risk within the ecosystem. Additionally, the researchers reported 1,726 phishing addresses to the community, which accounted for 42.7% of total community contributions during the same timeframe.

This research not only highlights the scale of the PTXPHISH threat but also emphasizes the importance of community vigilance. By sending 2,539 on-chain alert messages, the researchers assisted 1,980 victims, showcasing the potential for collaborative efforts in combating such scams.

As the cryptocurrency landscape continues to evolve, understanding and addressing threats like PTXPHISH is essential for safeguarding user assets and maintaining trust in blockchain technologies.