A victim of a $24 million phishing attack has received a portion of his stolen funds back after the attacker willingly sent it back to him.

According to web3 anti-scam solution Scam Sniffer, the attacker sent back $9.3 million to the victim after stealing over 9,579 Lido Staked Ether (stETH) and 4,850 Rocket Pool (rETH) tokens in late 2023.

The victim had fallen prey to attack after allowing “Increase Allowance” transactions requested during the phishing process. 

This tactic has been flagged as one of the most common strategies employed in phishing scams. Once approved, the requesting party has the right to transfer assets within the wallet. 

The issue, specific to ERC-20 tokens, has been criticized by market players who claim that it can allow rouge developers to deploy …