#CREATE2
LightNews LightNews
web3isgoinggreat.com
Wallet drainer steals more than $60 million in six months

November 12, 2023
https://web3isgoinggreat.com/?id=create2-wallet-drainer
Wallet drainer steals more than $60 million in six months A wallet drainer service has facilitated the theft of more than $60 million in various assets from almost 100,000 victims since May 2023. According to research group ScamSniffer, the drainer has recently started using functionality in the Ethereum network called CREATE2 to generate new addresses for each malicious signature. This allows the drainer to sidestep security alerts built into some crypto wallet software that would flag known malicious addresses. ScamSniffer identified one victim who lost almost 17,000 GMX (~$927,000) to this drainer after signing a malicious transaction.
November 13, 2023 at 4:39 PM
freeblock.bsky.social
Metamorphic detection gets tricky when CREATE2 is combined with minimal proxy patterns — the bytecode fingerprint changes but intent persists, so static analysis alone misses context.
March 23, 2026 at 1:45 PM
handle.invalid
January's Crypto scam shocker: Top 7 victims lost $17M to phishing signatures-such as ERC20 Permit, Create2, increaseAllowance, and Swap. #CryptoScam #StayAlert According to CryptoPotato.
Here's How Much Crypto Scammers Drained From Victims in January Alone
January's Crypto scam shocker: Top 7 victims lost $17M to phishing signatures-such as ERC20 Permit, Create2, increaseAllowance, and Swap. #CryptoScam #StayAlert According to CryptoPotato.
cryptonews.blue
February 11, 2024 at 12:59 PM
bs-xknows.bsky.social
Spot on. CREATE2 makes bytecode-level tracking almost impossible because of the deterministic address property. Even if the logic changes, the address stays the same, which is a nightmare for standard scanners. We definitely need more dynamic analysis for these edge cases.
March 23, 2026 at 1:49 PM
didweb02.dnproto.com
create2
January 15, 2026 at 4:17 AM
digitalcash.bsky.social
www.coindesk.com/business/202...
Ethereum Wallet Drainer Steals $60M in Six Months
Hackers are using a piece of code called Create2 to bypass security alerts when users sign malicious signatures.
www.coindesk.com
November 13, 2023 at 4:03 PM
analytickit.bsky.social
Awareness and education are key to protecting against the sophisticated exploits of Ethereum's CREATE2 function. Stay informed, stay secure. #CryptoSafety #EthereumUpdate
March 19, 2024 at 10:09 PM
analytickit.bsky.social
CREATE2's ability to deploy future contracts challenges current security frameworks, leaving digital assets at risk. Time for security products to evolve. #BlockchainChallenges #DigitalSecurity
March 19, 2024 at 10:08 PM
analytickit.bsky.social
Cybercriminals are exploiting Ethereum's CREATE2 for malicious gains, tricking users into approving phantom contracts. A call to arms for enhanced digital wallet security. #BlockchainExploits #CyberSecurity
March 19, 2024 at 2:24 PM
analytickit.bsky.social
Ethereum's CREATE2 function: a breakthrough in smart contract efficiency or a gateway for cybercriminals? Unpacking the double-edged sword of blockchain security. #EthereumSecurity #CREATE2
March 19, 2024 at 2:23 PM
infosec.skyfleet.blue
Ethereum feature abused to steal $60 million from 99K victims
Ethereum feature abused to steal $60 million from 99K victims
Malicious actors have been abusing Ethereum's 'Create2' function to bypass wallet security alerts and poison cryptocurrency addresses, which led to stealing $60,000,000 worth of cryptocurrency from 99,000 people in six months.
www.bleepingcomputer.com
November 13, 2023 at 9:43 PM
pcaversaccio.com
Having the possibility to counterfactually deploy contracts means that phishers can always trick people into approving to an empty EOA first, CREATE2 a contract to that address, and batch drain all approvals. PLEASE NEVER EVER APPROVE TO EMPTY EOAs (except if it's your own EOA).
April 7, 2024 at 10:39 PM
alexanderchopan.bsky.social

https://link3.to/wallet/post/62f5d659d45dac9fd05aebf2fbfe3e9d36c617ab2d225767248e22c194f4ad0b

“we utilize CREATE2 to generate deterministic account addresses from initial access keys.”
November 14, 2023 at 9:22 PM
alexanderchopan.bsky.social
“Things like the addition of CREATE2 unlocked lots of fun use cases …But the fact that they require such coordination to happen makes them fell a little less magical”

https://mirror.xyz/jamesmccomish.eth/8o0PuaVf03FcKPjQpAaHOcTaW9dJJsA4OTc2hCcTOaE
October 17, 2023 at 1:18 AM
earlybirdsinvest.bsky.social
Create two opcode bugs fixed in v2.5 security upgrade

According to Conflux, the security team has successfully completed a Create2 OpCode vulnerability with a Version 2.5 network upgrade. On March 24, 2025, the Conflux (CFX) network announced that a security vulnerability detected with the help of…
Create two opcode bugs fixed in v2.5 security upgrade
According to Conflux, the security team has successfully completed a Create2 OpCode vulnerability with a Version 2.5 network upgrade. On March 24, 2025, the Conflux (CFX) network announced that a security vulnerability detected with the help of the ecosystem team Grafun had been successfully patched. Grafun reportedly identified a critical vulnerability in Create2 Opcode related to Ethereum (ETH) virtual machines in February this year.
earlybirdsinvest.com
March 25, 2025 at 6:39 PM
marktsec.bsky.social
🚨 New drainer-as-a-service spotted on dark web: Lucifer Drainer
Features:
• ERC20 + CREATE2
• Permit2 batch support
• DAI & EIP-2612 permit abuse
• Real-time Telegram alerts
• No upfront fee, 20% per hit
#Web3Security #ThreatIntel #Phishing #infosec
July 30, 2025 at 6:54 PM
bandr283.bsky.social
شبكة ‪#Conflux‬ تُطلق التحديث v2.5 لإصلاح خلل في كود ‪#CREATE2‬ ضمن العقود الذكية، مما يُعزز أمان النظام ويوفر حماية أقوى للمطورين. يأتي هذا التحديث كخطوة لتعزيز ثقة المجتمع والمستثمرين بـ ‪#Conflux‬ وسط تحسن تدريجي في سعر العملة ‪#Blockchain‬ ‪#Crypto‬ ‪#CFX‬ ‪#Security‬ 🛡️
March 24, 2025 at 7:17 PM
crypto.news.web.brid.gy
Conflux: CREATE2 Opcode bug fixed with v2.5 security upgrade
Conflux says its security team has successfully patched the CREATE2 Opcode vulnerability with version 2.5 network upgrade. The Conflux (CFX) Network announced on March 24, 2025 that a security vulnerability detected with the help of ecosystem team GraFun, has been…
crypto.news
March 24, 2025 at 3:59 PM
vb-audit.bsky.social
🚨Exploit Alert: TGAI /Computility on BSC

What happened:
• The attacker used a ~2.4M USDT flash loan
• Deployed 25 CREATE2 helper contracts to buy TGAI tokens
• Manipulated the LP reserves using the sync() function, injecting ~17.5K USDT into the pair
• Then executed swapTGToUSDT, extracting profits
April 8, 2026 at 11:50 AM
index.basebiance.com.ap.brid.gy
合约地址详解：区块链世界的智能身份证
# 合约地址详解：区块链世界的智能身份证 ## 核心定义 **合约地址** 是区块链网络上智能合约的唯一身份标识符，由加密算法生成的一串由字母和数字组成的字符串。它相当于智能合约在区块链世界的"身份证号码"，用于在分布式账本中精准定位和调用智能合约程序。 ## 合约地址的详细解释 ### 生成机制与结构特征 当开发者在区块链上部署智能合约时，系统会通过特定算法生成合约地址。以以太坊为例，其生成逻辑包含两个主要方式： 1. **CREATE操作生成** * 基于部署者地址 + 交易nonce值计算 * 公式：`keccak256(rlp([sender, nonce]))[12:]` * 特点：顺序生成，无法预知最终地址 2. **CREATE2操作生成** * 引入盐值(salt)参数控制地址生成 * 公式：`keccak256(0xff + sender + salt + keccak256(init_code))[12:]` * 优势：允许预先计算合约地址 典型合约地址结构示例： 0x2f5c6F7e6d4E0F0E8a5C432D8f7b6Dd2A1B2C3D4 包含三个核心要素： * `0x`前缀：十六进制标识 * 40个字符：实际地址内容 * 校验机制：通过EIP-55实现大小写校验 ### 功能特性 * **不可篡改性** ：一经生成永久有效 * **全局唯一性** ：全网不会出现重复地址 * **可验证性** ：通过区块链浏览器可查询完整信息 * **交互入口** ：所有合约调用必须通过该地址进行 ## 合约地址的起源与背景 智能合约概念的提出可追溯至1994年Nick Szabo的学术研究，但直到2015年以太坊主网上线，合约地址才真正获得实际应用价值。Vitalik Buterin团队在以太坊黄皮书中首次系统定义了合约地址的生成规则，使其成为智能合约生态的基础设施。 关键演进节点： * 2016年：EIP-7引入CREATE操作码 * 2019年：EIP-1014新增CREATE2操作码 * 2021年：EIP-3779提出地址前缀标准化 ## 重要性与应用场景 ### 核心价值 1. **确定性验证** ：确保智能合约的真实性和完整性 2. **去中心化交互** ：实现无需信任的自动化执行 3. **资产锚定** ：成为数字资产（如ERC-20代币）的发行载体 ### 典型应用 * **DeFi协议** ：Uniswap的Router合约（0x7a250d...） * **NFT项目** ：BAYC的合约地址（0xBC4CA0...） * **跨链桥接** ：Polygon Bridge的合约地址 * **DAO治理** ：Compound治理合约（0xc0dae0...） ## 特点与风险 ### 独特优势 * **永久存续** ：只要区块链存在，地址即有效 * **透明可查** ：所有交易记录公开可追溯 * **无权限访问** ：任何用户均可调用公开方法 ### 潜在风险 * **不可逆性** ：部署后无法修改代码漏洞 * **仿冒风险** ：相似地址钓鱼攻击（如0x1vs0xI） * **依赖风险** ：DApp前端可能劫持合约调用 ## 关键概念对比 特征 | 合约地址 | 钱包地址 ---|---|--- 生成方式 | 合约部署时创建 | 密钥对推导生成 控制权 | 无直接控制者 | 私钥持有人控制 资金存储 | 可持有代币和NFT | 存储原生币和代币 交易发起 | 只能被动响应调用 | 可主动发起交易 ## 总结 作为区块链智能合约的"数字指纹"，合约地址承载着去中心化应用的核心逻辑与价值。理解其运作原理不仅能帮助用户安全参与DeFi、NFT等创新领域，更是掌握区块链技术本质的重要基础。随着账户抽象（Account Abstraction）等新技术的发展，合约地址的功能边界仍在持续扩展。
basebiance.com
May 5, 2025 at 11:09 AM
0xfarhad.bsky.social
Highly recommended article written by Vijaya Bhaskar about CREATE2 opcode in solidity:

medium.com/coinmonks/pr...

#Ethereum
Pre-compute contract deployment address using CREATE2
How can we know the deployment address of a contract before deploying? Read on …
medium.com
September 7, 2023 at 8:03 AM
cryptoscam.skyfleet.blue
Hackers Exploit New Feature To Bypass Security Alerts – Report - In a concerning trend, hackers, specifically wallet drainers, have begun to leverage the CREATE2 opcode on the Ethereum network to sidestep security measures in select wallets. This development was revealed on Su...
Hackers Now Exploit New Feature To Bypass Security Alerts - Report
In a concerning trend, hackers, specifically wallet drainers are leveraging the Create2 opcode to sidestep security measures in select wallets.
bitcoinist.com
November 12, 2023 at 1:50 PM
zerodot1.bsky.social
https://tarnkappe.info/artikel/krypto/create2-ethereum-exploit-sorgte-fuer-ueber-60-mio-usd-verlust-282659.html
CREATE2: Ethereum-Exploit sorgte für über 60 Mio USD Verlust
Hacker missbrauchten einen Opcode namens CREATE2 in der Ethereum-Blockchain und sorgten damit bereits für hohe Verluste bei Walletbesitzern.
tarnkappe.info
November 14, 2023 at 11:01 AM
flarestart.bsky.social
Ethereum-Solidity Quiz Q31: What is the difference between CREATE and CREATE2 transaction types?
via Dev.to

https://flarestart.com/article/ethereum-solidity-quiz-q31-what-is-the-difference-between-create-and-create2-transaction-types-20260219
#DevNews #DevOps #Tutorial
Ethereum-Solidity Quiz Q31: What is the difference between CREATE and CREATE2 transaction types?
CREATE (Regular Deployment) // Address = keccak256(deployer, nonce) new CreateContract(owner); ────────────────────────────────────────────────────────────────── CREATE...
flarestart.com
February 19, 2026 at 4:40 PM