Back Chaincatcher

$500,000 stolen by a phishing attacker was ta...｜GoPlus, USDC

Chaincatcher • August 7, 2026

According to GoPlus monitoring, a user on the Base chain lost 500,000 USDC due to a phishing attack. When the attacker exchanged the stolen funds for WETH, the script did not set slippage protection, routing to a Uniswap V4 WETH/USDC pool with almost no liquidity, resulting in only 67.9 ETH (worth $129,000) being exchanged for 500,000 USDC, of which $370,000 was earned by an MEV bot.

The MEV bot only paid 0.03 USDC to front-run the transaction but incurred 3.5 ETH in gas fees for this. Subsequently, the victim sent an on-chain message to the attacker and the MEV address, stating that they had identified the attacker and were willing to pay a 10% bounty for a refund.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MEV Bot Steals $370K from Phishing Victim on Base Chain On August 7, 2026, a user on the Base chain lost 500,000 USDC due to a phishing attack. The attacker attempted to convert the stolen funds to WETH but used a script without slippage protection, leading to a transaction through a low liquidity Uniswap V4 pool. This resulted in only 67.9 ETH being received, valued at $129,000, while $370,000 was siphoned off by MEV bots. The MEV bot front-ran the transaction by paying just 0.03 USDC and incurred a gas fee of 3.5 ETH. The victim has since sent on-chain messages to both the attacker and the MEV address, claiming to have identified the attacker and offering a 10% bounty for a refund. 3 sources 63

Extracted Entities

$500,000 stolen by a phishing attacker was ta...｜GoPlus, USDC

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)