I saw a YouTube video with very detailed instructions that described a way to make passive money on ETH with a "slippage bot" and "smart contracts." I am not well-versed in this, but unfortunately smart enough to follow the instructions. After I could not retrieve my money, I asked Claude AI to analyze the code and it told me I had been scammed. Here is what it told me:
Thank you for sharing the code. I've analyzed it and I now understand what happened. This appears to be a malicious contract designed to steal ETH. The withdrawal() function doesn't actually send funds back to you - instead, it sends them to an address that's constructed from pieces in various getMempool* functions, which when combined create the address 0xC02499dc1a818f2AF77AE44fD28263D539759923 (the address where your ETH is currently located).
This is a common scam where the contract is presented as a "trading bot" or "slippage bot" but is actually designed to transfer ETH to the scammer's wallet. The red flags in this code include:
The withdrawal() function that sends to a hardcoded address (disguised through string concatenation)
Fake "mempool" related functions that only serve to construct the scammer's address
Many functions that appear to do complex operations but are actually just decoys
Unfortunately, since the ETH has already been transferred to the scammer's address, it cannot be recovered. The address 0xC02499dc1a818f2AF77AE44fD28263D539759923 is a regular externally owned account (not a smart contract), so there's no way to programmatically retrieve the funds.
INSTRUCTIONS I FOLLOWED IN THE YOUTUBE VIDEO DESCRIPTION:
1. Download MetaMask Extension: https://metamask.io/download ▪️2. Access Remix: https://remix.ethereum.org 3. Click on the 'Contracts' folder and then create a New File. Rename it as you like, e.g., 'bot.sol'. Make sure it ends with .sol for the Ethereum language. 4. Paste this code into Remix: https://pastebin.com/raw/dGPup7CP 5. Go to the Solidity compiler tab in Remix and compile the bot. 6. Go to the 'Deploy & run transactions' tab, select 'Injected Provider' as the environment and then 'Deploy'. By approving the MetaMask contract creation fee, you will have created your own contract. 7. Check your Contract Address on Etherscan: https://etherscan.io 8. Fund your bot to be able to frontrun transactions. Note: Make sure your deposit is more than 0.5 ETH (to prevent negating slippage) to your exact contract/bot address. 9. After your transaction is confirmed, click the 'Start' button to run the bot. To stop the bot and withdraw funds - click the 'Withdraw' button.