Recently, the Pi Network community exposed a large-scale scam incident, drawing significant user attention. Due to a social engineering attack that resulted in the theft of millions of Pi tokens, the Pi team has urgently suspended wallet payment request functions to prevent further losses. This move is seen as a critical response in Pi Network’s security governance.
According to information disclosed by the community, the scammers did not exploit technical vulnerabilities to breach the system but instead used the transparency of the blockchain to lock wallets holding large amounts of Pi tokens. Subsequently, the attacker sent payment requests disguised as normal transactions to targeted users. Once users authorized, the transfers were completed immediately. Data shows that over 4.4 million Pi tokens were stolen in this incident, with most related transactions pointing to the same suspicious wallet.
Blockchain tracking data indicates that since July 2025, this scam wallet has received approximately 700,000 to 800,000 Pi tokens, with continuous inflows each month. In December, the inflow of funds accelerated significantly. The community generally believes that as more users gain eligibility for mainnet transfers, the efficiency of scam activities is also increasing. This repeated, large-scale transfer behavior is viewed by analysts as organized, long-term fraud rather than an isolated incident.
The Pi community leader has publicly reminded users to refuse any unsolicited payment authorizations, even if the request appears to come from acquaintances or official accounts. There are also reports that some wallet addresses may be used to disperse stolen tokens to obscure the source of funds and increase tracking difficulty.
In fact, Pi Network has been continuously strengthening security measures over the past few months. In March this year, the platform introduced two-factor authentication during the mainnet migration to reduce the risk of account theft. Additionally, Pi has incorporated artificial intelligence into the KYC verification process, reducing manual review workload by about 50%, helping more users complete mainnet migration faster.
Furthermore, the Pi Node 0.5.4 version update optimized desktop performance and fixed issues with inaccurate node reward calculations. Although freezing the payment function has impacted user experience to some extent, in the long term, this measure is believed to help curb scams and stabilize the Pi Network ecosystem.
Overall, this incident highlights the importance of security issues and user risk awareness within Pi Network. During the critical phase of mainnet rollout, how to improve decentralization efficiency while strengthening user protection will be one of the core challenges for Pi Network’s next development step.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
1 Likes
Reward
1
6
Repost
Share
Comment
0/400
GateUser-c5897cb8
· 24m ago
A simple face recognition payment could solve the problem, but it's rendered helpless, causing significant losses for Paiyou.
Pi Coin News: Over 4.4 million PI stolen, Pi Network urgently freezes wallet payment functions
Recently, the Pi Network community exposed a large-scale scam incident, drawing significant user attention. Due to a social engineering attack that resulted in the theft of millions of Pi tokens, the Pi team has urgently suspended wallet payment request functions to prevent further losses. This move is seen as a critical response in Pi Network’s security governance.
According to information disclosed by the community, the scammers did not exploit technical vulnerabilities to breach the system but instead used the transparency of the blockchain to lock wallets holding large amounts of Pi tokens. Subsequently, the attacker sent payment requests disguised as normal transactions to targeted users. Once users authorized, the transfers were completed immediately. Data shows that over 4.4 million Pi tokens were stolen in this incident, with most related transactions pointing to the same suspicious wallet.
Blockchain tracking data indicates that since July 2025, this scam wallet has received approximately 700,000 to 800,000 Pi tokens, with continuous inflows each month. In December, the inflow of funds accelerated significantly. The community generally believes that as more users gain eligibility for mainnet transfers, the efficiency of scam activities is also increasing. This repeated, large-scale transfer behavior is viewed by analysts as organized, long-term fraud rather than an isolated incident.
The Pi community leader has publicly reminded users to refuse any unsolicited payment authorizations, even if the request appears to come from acquaintances or official accounts. There are also reports that some wallet addresses may be used to disperse stolen tokens to obscure the source of funds and increase tracking difficulty.
In fact, Pi Network has been continuously strengthening security measures over the past few months. In March this year, the platform introduced two-factor authentication during the mainnet migration to reduce the risk of account theft. Additionally, Pi has incorporated artificial intelligence into the KYC verification process, reducing manual review workload by about 50%, helping more users complete mainnet migration faster.
Furthermore, the Pi Node 0.5.4 version update optimized desktop performance and fixed issues with inaccurate node reward calculations. Although freezing the payment function has impacted user experience to some extent, in the long term, this measure is believed to help curb scams and stabilize the Pi Network ecosystem.
Overall, this incident highlights the importance of security issues and user risk awareness within Pi Network. During the critical phase of mainnet rollout, how to improve decentralization efficiency while strengthening user protection will be one of the core challenges for Pi Network’s next development step.