[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![web3_antivirus Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::1578419590547361792.png) Web3 Antivirus [@web3_antivirus](/creator/twitter/web3_antivirus) on x 9088 followers
Created: 2025-06-12 16:29:59 UTC

Looks like the attacker knew the scheme perfectly. The victim had frequently interacted with @KangaExchange (likely based in Poland) and got tricked by a fake $ETH transfer from a spoofed address.
The user later sent XX ETH to that address, thinking it was legit.

Here’s the fake tx.

![](https://pbs.twimg.com/media/GtQaRlVXUAYoAkQ.jpg)

XXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1933200117529551288/c:line.svg)

**Related Topics**
[tx](/topic/tx)
[legit](/topic/legit)
[$eth](/topic/$eth)
[poland](/topic/poland)
[kangaexchange](/topic/kangaexchange)
[web3](/topic/web3)
[ethereum](/topic/ethereum)
[coins layer 1](/topic/coins-layer-1)

[Post Link](https://x.com/web3_antivirus/status/1933200117529551288)