How My Open-Source Scanner Caught a Crypto Scammer Exposing Their Own Keys

Exposing the keys in the GitHub Issue

The Phishing Site (Notice the Spotify option)

There is a golden rule in cybersecurity: the weakest link is almost always human error. But what happens when that human error comes from a malicious actor trying to orchestrate a crypto phishing scam? The result is surprisingly comedic.

Here is the story of how my newly built open-source secret scanner, Sentinel, accidentally neutralized a Tether (USDT) phishing operation during a routine benchmark.

The Setup: Testing in the Wild