stadium

ah but even quicker route to the scam token is clicking on the cast shares that include $ RAIL in the copy, and that’s the only token branded correct in the list 

i bought $30 worth smh. 

also worth noting that their contract somehow gets you to swap for the token and then send the token out of your wallet in the same tx. see here:

Please be careful there is a *fake* $ RAIL token that if you swap into the contract is programmed to steal your newly purchased fake $ RAIL tokens (only the token you bought, not your entire wallet balance). It's been reported to be taken down but be extra careful

Dev ecosystem @farcaster, cofounder @bountycaster. Prev: cofounder of Scalar Capital, product at Coinbase, coproducer @ethereumfilm

🙏🙏

is there a way to confirm it doesn’t have access to any other assets in my wallet?

no more activity in my wallet since but want to ensure if poss

I'd do a read-only check on revoke.cash, go there and plug in your wallet address. 

It's unlikely that anything you did gave it access to anything else in your wallet. That's not possible through a swap. I suspect the token was backdoored so a third-party can transfer it out from your wallet. This is a pretty common token scam. Will look at the contract.

fake RAIL was a backdoored token contract. this section lets the attacker forge permit signatures and transfer any user's balance in the contract. 

this scam is common enough that you can often recognize it from this snippet: if there's weird assembly in here and you don't see "ecrecover" anywhere, it's a backdoor.

yeah, it was backdoored. here's how it works:

I work at the posts office

terminally.online

thanks for checking all this out. so to confirm, nothing else in my wallet is compromised? or should i still check thru above

yeah, it was backdoored. here's how it works:
https://farcaster.xyz/horsefacts.eth/0x6ec37603

crypto user researcher /openux || 
internet-native mysticism /manansh || manansh.xyz

Try this https://farcaster.xyz/horsefacts.eth/0xb09a3f2c