Recently, many users reported that their wallets automatically transferred funds, but the amount of each transfer was 0 USDT. They were very panicked and worried whether their wallets had been stolen.
In fact, this is a common type of 0-amount transfer disruption. The attacker will use the characteristics of the EVM token contract to initiate a 0-amount transfer record. There is no need to panic, your wallet is usually safe and there is no need to bother with such records.
For example, after user A sends 500 USDC to B in a normal transaction, he may receive 0 USDC from address C (attacker) after a while; the same transaction hash may also show a 0 USDC transfer initiated by user A to address C.
The reason is that some token contracts transferFrom The function does not force the transfer amount to be greater than 0, so a 0 USDC transfer can be initiated from any user account to an account other than approval, and the transaction will not fail. Attackers will take advantage of this and continue to launch attacks on active on-chain users. transferFrom Operation to create a transfer record.
Such interference records may occur on both EVM and TRON on-chain. Please be sure to carefully check and copy the correct transfer address to avoid asset loss.
At the same time, UKey is studying some risk identification designs to reduce such spam transaction interference and improve address identification security.