Unmasking the Enigmatic Scammer: Insights from CertiK's Investigation

Blockchain security firm CertiK has brought to attention possible connections between an anonymous scammer and a Canadian group, as outlined in a report sent to Cointelegraph. However, CertiK has been unable to confirm the identity or names of the individuals responsible.

CertiK recently released its findings from an investigation into a pseudonymous crypto scammer known as "Faint" on August 16. According to the report, "Faint" has been active since 2022, resulting in community losses of at least $1 million.

The security firm identified various Ethereum Name Service (ENS) domains linked to "Faint," including faintxbt.eth, comefindme.eth, thanksfortheseed.eth, onchainkitten.eth, and hzontop.eth.

CertiK also pointed out connections between "Faint" and another suspected scammer named "Soup." An investigation by on-chain researcher ZachXBT revealed that "Soup" had stolen significant assets by attacking Discord servers under the pretense of being associated with a media platform.

CertiK noted that the anonymous scammer, "Faint," often mocked projects following Discord server breaches. In one instance, after hacking a Discord server in 2022, "Faint" posted an image featuring a watch along with an announcement about the compromised Discord of the nonfungible token (NFT) card game Cross The Ages.

CertiK drew attention to a watch shown by "Faint" in the 2022 post, which bears resemblance to a watch identified in ZachXBT's investigation of another scammer, "Madman." The security firm suggested a possible connection between the two based on the watch.

Despite these findings, CertiK was unable to ascertain the actual identities of the hackers. The company emphasized that "Faint" remains a threat to the community and urged community members to take steps to safeguard against potential wallet-draining attempts.

In its report, CertiK recommended utilizing applications like Wallet Guard and Pocket Universe, which can alert users to interactions with wallet-draining entities. The company also advised users to verify addresses and ensure that any approvals they grant are not associated with recognized phishing addresses.