Fake AI Trading Bot Scam Steals 274.6 ETH
A fake AI trading bot scam stole 274.6 ETH, worth about $517,000, from 224 victims, according to blockchain intelligence firm TRM Labs. Nine near-identical YouTube tutorials promoted automated Ethereum arbitrage bots allegedly built with Anthropic’s Claude.
The videos directed users to malicious compiler websites resembling Remix. Victims copied code, connected their wallets, deployed smart contracts and funded them with ETH. However, the backend replaced the displayed code with malicious contracts before deployment. The contracts had no AI or arbitrage functions. Instead, they transferred deposits above 0.05 ETH to six addresses controlled by the scammers when users selected “Start” or “Withdraw.”
TRM identified 234 deployed contracts, as some victims created multiple contracts. The median loss was 1 ETH. The scam used valid user-authorised transactions rather than conventional phishing links, seed-phrase theft or broad token approvals, making it harder for wallet simulations and address blocklists to detect.
The fake AI trading bot campaign highlights growing smart-contract and social-engineering risks for crypto traders. Users should verify contract bytecode independently, avoid deploying code from untrusted tutorials and test new contracts with minimal funds.
Bearish
The immediate market impact is bearish, although the direct financial loss is small relative to Ethereum’s total market capitalisation. The scam adds to ongoing concerns about smart-contract security, AI-branded crypto fraud and the ability of wallets to detect transactions that users technically authorise themselves.
In the short term, traders may reduce risk exposure to unfamiliar Ethereum dApps, compiler tools and AI trading projects. Security disclosures can also create temporary selling pressure for smaller tokens associated with automated trading, wallet infrastructure or phishing-related activity. ETH itself is unlikely to face a major fundamental shock from a $517,000 theft, but sentiment may weaken if similar campaigns expand.
Longer term, repeated incidents could slow retail participation in on-chain trading and increase demand for audited contracts, transaction simulation, code verification and stronger wallet safeguards. Similar phishing and drainer attacks have historically produced temporary risk-off reactions, especially when losses are large or affect a major protocol. This case is more likely to reinforce caution than trigger broad market liquidation, so the bearish classification reflects negative sentiment and security risk rather than a systemic Ethereum threat.