YouTube “Crypto Trading Bot” Scam Drains 256 ETH — SentinelLABS Report 🚨

[cryptobro]

Cybersecurity firm SentinelLABS is warning about an ongoing scam using old, legitimate-looking YouTube accounts to promote a so-called crypto trading bot — which actually contains a weaponized smart contract designed to drain wallets.
Scam Details

How it works:

    Video promotes a “profitable trading bot” and shares smart contract code.

    Victim deploys the contract → attacker’s wallet address is hidden as a trading address.

    Once the victim funds the contract, the attacker can withdraw all assets.

Entry point: Victims are told to deposit at least 0.5 ETH (~$1,829) to cover gas and “ensure big profits.”

Stolen so far: Over 256 ETH (~$939K). Largest wallet: 244.9 ETH.

How They Build Trust

Using aged YouTube channels with histories of posting crypto news, investing tips, and pop culture content.

Possible purchased accounts (old YouTube channels are openly sold on Telegram/search engines).

Some videos appear AI-generated to scale faster.

Negative comments are deleted; fake testimonials flood the comment section.

Red Flags & Takeaways

Unverified trading tools promoted on social media = high risk.

“Too good to be true” returns are almost always scams.

Never deploy or fund contracts you haven’t fully reviewed.

Use trusted dev resources and peer review before interacting with on-chain code.

Bottom line: This scam works because it targets greed + trust in established platforms. Always verify the code and the source before sending funds.

Has anyone here seen these videos in their YouTube recommendations lately?

[jacson4]

Scammers have leveled up — this isn’t just about fake Telegram groups or phishing emails anymore. Buying old YouTube accounts with years of legit-looking history, posting AI-generated “trading bot” videos, and wiping negative comments is a calculated, multi-step con. They know people trust the platform and the brand of the channel.

The weaponized contract method is brutal because it bypasses the need to trick you into sending funds directly — the smart contract just gives them full withdrawal rights once you interact. That’s why these “deposit to activate” schemes are so dangerous.

If you see a crypto bot promoted on YouTube, treat it as guilty until proven innocent. Verify the code, verify the source, and remember: if the returns sound too good to be true, they’re not just unlikely — they’re almost certainly a trap.

[Nahid10]

This is exactly the kind of scam that thrives because it mixes just enough legitimacy to disarm people. Using aged YouTube channels with a history of real crypto content is a smart (and dangerous) move — it instantly lowers people’s guard. By the time viewers see the “trading bot” pitch, the credibility is already baked in.

The technical setup here is nasty. The attacker’s wallet being hard-coded into the smart contract means victims lose funds the second they interact. And with a minimum deposit of 0.5 ETH, even a handful of victims can mean massive profits for the scammer — we’re already seeing nearly $1M stolen.

Rule of thumb: never deploy or fund a contract you haven’t fully reviewed yourself or had vetted by trusted devs. Greed + FOMO is exactly what these setups prey on.