Investor from Singapore Loses All Crypto Assets After Downloading Fake Game

In an alarming incident highlighting the vulnerabilities within the cryptocurrency world, Mark Koh, an investor and founder of the RektSurvivor community, fell victim to a sophisticated scam. The fraudulent activity resulted in the loss of all his digital assets after he downloaded what seemed to be a legitimate online game’s beta version.

The Attack Methodology

The scam was cleverly disguised as an opportunity to participate in beta testing for a game called MetaToy. Koh encountered this offer on Telegram in December 2025, where it appeared credible due to its well-designed website, active Discord community, and communication supposedly from developers.
Yet, upon installing the game’s launcher, his Norton antivirus software detected suspicious activity. Despite conducting a full system scan and even reinstalling Windows 11, all connected software wallets were emptied within 24 hours.

Technical Complexity of the Attack

Hackers managed to siphon off approximately $14,000 worth of crypto-assets accumulated over eight years. Koh insists he did not input seed phrases or open wallet applications during the theft. This points towards an intricate technical attack involving authentication token theft combined with an unknown vulnerability in Google Chrome that allowed malicious code execution.
Koh identified several attack vectors and attempts at intercepting system libraries during his investigation.

Security Recommendations

Following this incident, Koh filed a report with Singapore police and issued public warnings about such risks. He strongly advises against storing seed phrases in browser wallets when not in use. Additionally, he highlights the importance of using separate private keys to minimize potential damage if a system is compromised.
The implications of this event underscore the critical need for heightened security measures among cryptocurrency users. As hackers become more sophisticated, it is vital that investors stay informed and adopt best practices to protect their digital wealth from similar threats.