MalwareTips: gitlawb.info 'voting rewards' page with fake 1.25x boost reported as a wallet-draining lure
In a post dated October 24, 2026, MalwareTips warns about a 'gitlawb voting rewards' scam that uses a cloned project identity to promote a supposed vote on a distribution date and a 1.25x increase in claiming power. M…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
In a post dated October 24, 2026, MalwareTips warns about a 'gitlawb voting rewards' scam that uses a cloned project identity to promote a supposed vote on a distribution date and a 1.25x increase in claiming power. MalwareTips says the reported site, gitlawb[.]info, displays a rewards proposal and asks visitors to select and connect a crypto wallet, and that it has been reported as a wallet-draining lure. MalwareTips notes the name refers to the gitlawb project (not GitLab), that the project's own gitlawb.com address now redirects to its renamed site, and that copied project wording does not establish a link to the real project. It says the host now returns a connection timeout and that no wallet payload was tested. MalwareTips advises not to authorize any wallet action through the gitlawb[.]info proposal, never to enter a recovery phrase, and notes that disconnecting a site does not cancel token allowances already granted. The genuine project's domain is not the scam site.
How the scam works
Fake 'voting rewards' pages copy a crypto project's identity and invite holders to take part in a decision, here a vote on a distribution date with a 1.25x boost to 'claiming power'. Making participation look like governance keeps the visitor focused on the vote rather than on the wallet prompts that follow. After connecting, a drainer page can ask for a signature, a token allowance or a transfer, and a vote label doesn't limit what that permission allows. An approval can let the operator move tokens later without asking again.
MalwareTips points out that gitlawb is a separate project from GitLab, and that copied wording doesn't show any link to the real project. Because the host now times out and MalwareTips didn't test a wallet, it doesn't say exactly what the page requested. Anyone who interacted with it should check what was actually approved in their wallet history or on a blockchain explorer. The real gitlawb project is impersonated and is not involved.
Source
MalwareTips, "gitlawb Voting Rewards Scam Exposed: The Fake 1.25x Claiming Power Trap" (published 24 October 2026).
Red flags
- A 'rewards vote' or boosted 'claiming power' offer on a domain such as gitlawb.info.
- A wallet-selection panel as the first step to vote or claim.
- Signatures or approvals that don't clearly match a simple vote.
- Requests for a recovery phrase to take part.
If you were targeted
- 1Don't connect a wallet to gitlawb.info or approve anything there.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.