Ethereum mailing list breach exposes 35,000 to crypto draining attack

A compromised Ethereum mailing list was used on June 23 to send a phishing email to approximately 35,794 recipients promoting a fake staking collaboration; the linked site hosted a crypto-drainer that would have emptied wallets if users connected and signed transactions. Ethereum quickly blocked the sender, notified the community, submitted the URL to blocklists, migrated some email services, and on-chain analysis showed no successful drains during the campaign.