A joint law enforcement initiative known as 'Operation Atlantic', involving agencies from the United States, United Kingdom, and Canada, has achieved a major breakthrough against approval phishing scams. Launched in March, the operation has identified over 20,000 victims and uncovered more than $45 million in stolen funds, with approximately $12 million frozen by authorities.
Background and Participating Agencies
The operation was led by the UK's National Crime Agency, the US Secret Service, and the Ontario Provincial Police. Approval phishing scams exploit smart contract vulnerabilities by tricking users into signing malicious transaction approvals, effectively giving attackers control over their wallets. These scams often masquerade as legitimate airdrops or DeFi projects.
Key Findings
Investigators traced tens of thousands of suspicious transactions across multiple blockchains, totaling over $45 million. Through on-chain analysis and international cooperation, law enforcement successfully froze approximately $12 million in illicit gains, preventing further losses. Some funds are now in the process of being returned to victims.
Industry Warnings and Recommendations
The operation underscores the critical need for user caution in decentralized finance. Never sign unknown transaction approvals, especially from unverified sources. Experts recommend using hardware wallets, regularly revoking unnecessary token approvals, and installing security tools to mitigate phishing risks.
Operation Atlantic demonstrates the effectiveness of cross-border collaboration in combating crypto crime. Such coordinated efforts are expected to expand, further protecting global digital asset holders.