‘AI-based’ dApp Harvest Keeper drains millions in users’ funds

• Recent reports suggest that AI-powered dApp Harvest Keeper is a rug pull scam.
• Several crypto security firms, including CertiK, claimed that the project has stolen nearly $1 million.

According to recent reports, the “AI-based” dApp Harvest Keeper is a rug pull scam.

On 19 March, CertiK, a crypto security firm, reported that a privileged getAmount function drained the Paris-based Harvest Keeper smart contract. It was also discovered that users’ assets were stolen through ice phishing transactions on Binance Smart Chain [BSC], Ethereum [ETH], and Polygon [MATIC].

#CertiKSkynetAlert ?

We can confirm that @Harvest_Keeper is a scam.

At the time of writing, we can confirm ~$933k of users' assets have been stolen.

Revoke permissions to EOA: 0x250ce5a8d8a8f0345fb8708e0575c8ede7710c14

Do not interact with the project's URL. pic.twitter.com/MeQRSeydND

— CertiK Alert (@CertiKAlert) March 19, 2023

Several crypto security firms, including CertiK, claimed that the project has stolen nearly $1 million. Individuals have been advised not to interact with any of the project’s URLs.

The security division of De.Fi also requested that users revoke smart contract approvals as soon as possible.

There has been no evidence of the attacker’s identity so far. However, since the theft has taken place so recently, it is possible that the identity will be discovered later.

Ice phishing is a web3 attack that tricks users into manually signing and approving permissions. The rug pull is another such crypto scam.

Across the three aforementioned chains, $219k has been stolen in ice phishing transactions so far.

2/ At the same time, user assets have been stolen through ice phishing transactions across BSC, Ethereum and Polygon.

Across the 3 chains, ~$219k have been stolen in ice phishing transactions so far.

Stolen assets transferred to EOA 0x15a8a.

— CertiK Alert (@CertiKAlert) March 19, 2023

Taking advantage of enthusiasm around AI

Harvest Keeper claimed to use artificial intelligence (AI) in such a way that users could receive daily rewards of 4.81%, with the investment increasing to 101% in three weeks. The project promoted itself as a platform that could assist users in turbulent market conditions by utilizing AI.

Harvest Keeper also claimed that Contract Wolf tested its smart contract, confirming the complete safety of investments and the absence of technical flaws in the platform’s work.

To some extent, the enthusiasm around AI has taken over the crypto market, with many related projects experiencing rapid growth. Harvest Keeper appears to have taken advantage of this.

The crypto community is understandably enraged by the news. In any case, investors will have to put up a fight to get back their funds, which is a common theme running through the market as it experiences many negative incidents.