Pudgy World phishing site steals wallet passwords via fake unlock prompts

Security firm Malwarebytes Labs warns of a Pudgy World phishing campaign impersonating Pudgy Penguins’ new game. The fake domain (pudgypengu-gamegifts[.]live) uses a highly realistic crypto wallet interface to push users into entering credentials. In the Pudgy World phishing flow, victims pick their wallet on the site and then see an “unlock” page that mimics trusted wallet software. Malwarebytes says the timing aligns with the game’s March 10 launch and a surge of new users, and that the attack targets major wallet types across ETH and SOL holders, suggesting a well-prepared phishing toolkit. For traders, this is an ecosystem safety risk rather than a protocol change. However, successful Pudgy World phishing can trigger short-term panic selling and harm sentiment around the Pudgy Penguins community and related tokens. If you entered any credentials, Malwarebytes advises changing wallet passwords and moving funds to a safer wallet.
Neutral
This news is not a protocol upgrade or tokenomics change. It is a credential-theft risk tied to Pudgy World’s launch, which may cause short-lived sentiment shocks (panic selling) if users report losses. However, it does not directly alter ETH or SOL fundamentals, so the expected price impact on the mentioned cryptocurrencies is likely limited. Longer term, the market effect depends on whether victims expand and whether mitigation actions (password resets, wallet migrations, takedowns) contain the damage.