standardreserve.app scam

A phishing scam involving cryptocurrency was reported against the website standardreserve.app on 15 September 2026. Approval-phishing wallet drainer impersonating the Standard Reserve project. The fake site standardreserve.app (domain registered 2026-09-15 01:26:11 UTC) impersonates the legitimate project at standardreserve.xyz and x.com/standard_rsv. It invites visitors to connect a wallet in order to "vote". Once connected, it presents an ERC-20 approve() transaction for the maximum uint256 value, granting an unlimited spending allowance to an attacker-controlled contract. On Robinhood Chain (EVM chainId 4663) the unlimited approval was signed at 2026-09-15 02:20:20 UTC in tx 0x2ecd3f4e3f1062e75b52a87c1a941c08724c4a6d6082d3eefcf7ef1e4e9e0fc7, granting unlimited allowance on token 0x4ed2692f5e108724a919de5fcbf267f231d5e333 (Crossrate Markets, CROSSRATE) to attacker contract 0x39c0107827c2f356c87cab9123db64d7ccc10132 (6,736 bytes of bytecode, purpose-built drainer). Eight seconds later, at 02:20:28 UTC, attacker EOA 0x4675df110346fd921608c24b0611646bf35c1e34 called that contract and swept 479,561.4377 CROSSRATE in tx 0x15a37a186c5e3db4fac15ae9e1f5cfd8fe3f9dff901c1dfef38a92098d8fc107. The 8-second gap indicates an automated mempool-watching bot, not manual operation. The malicious approval has since been revoked, but the phishing domain remains live and is actively targeting further victims. Wallet addresses linked to this report: ethereum: 0x39c0107827c2f356c87cab9123db64d7ccc10132, 0x4675df110346fd921608c24b0611646bf35c1e34 Do not send money or cryptocurrency to anyone connected to this report. If you have already paid, contact your bank or exchange and report the incident to your national fraud authority.