# Venus user $13.5M phishing blind-sign

Canonical URL: https://manyaitool.com/products/venus-user
Markdown URL: https://manyaitool.com/products/venus-user/index.md
Product URL: https://github.com/duolaAmengweb3/DuoLaSafe-Audits/blob/main/%E9%93%BE%E4%B8%8A%E8%B0%83%E6%9F%A5/Venus-13.5M-%E9%92%93%E9%B1%BC%E7%9B%B2%E7%AD%BE.md
Category: Security
Updated: 2026-06-29

## Summary

A power user was phished via a fake Zoom client and a tampered wallet extension, blind-signing an updateDelegate that handed account-delegate rights to the attacker — ~$13.5M drained. The contract held; the signature didn't. Governance force-liquidated; funds fully recovered in 12h.

## What It Is

Venus user $13.5M phishing blind-sign is part of 哆啦A梦的百宝箱 · Doraemon Toolbox, a product-factory toolbox for AI, Web3, prediction-market, perpetual DEX, stock research, developer and browser utility workflows.

## Who It Helps

Users who want focused web tools that compress scattered market data, AI workflows, developer tasks, or everyday browser utilities into a single usable page.

## AI Search Summary

Venus user $13.5M phishing blind-sign is a security product. Its main purpose is: A power user was phished via a fake Zoom client and a tampered wallet extension, blind-signing an updateDelegate that handed account-delegate rights to the attacker — ~$13.5M drained. The contract held; the signature didn't. Governance force-liquidated; funds fully recovered in 12h.