Crypto investigator JP, founder of IOC Investigations, reported that the website Tronify.rent drained $69,651 from roughly 80 victims throughout September 2026. The theft drew fresh scrutiny after one victim claimed to have asked Google Gemini about Tronify.rent’s safety prior to transacting. The victim stated that Google’s AI answered that the site was safe.
Tronify.rent attracted users by posing as a TRON energy rental service promising discounted transaction fees. The operators claimed to run under the entity Tronify Energy Solutions LLC with a Florida address. They also advertised a SOC 2 Type II security infrastructure on the site, despite no independent audit ever verifying this claim.
How Malicious Sites Trick Gemini
Google itself regularly warns users that generative AI models can generate inaccurate information and urges the public to always cross-check with other sources. In its AI safety documentation, Google notes that malicious web pages sometimes hide prompt-injection material - covert instructions designed to manipulate AI systems while scanning page data.
This AI vulnerability adds to a recent string of crypto exploits. TRM Labs documented a case with a similar pattern in September, where a fake AI trading bot stole $517,000 from 224 victims.
The Scammers’ Trail Detected Since February
Security platform PhishDestroy had actually flagged the Tronify.rent domain back in February with a critical threat score of 90/100. The site was blacklisted as a crypto scam and brand impersonation. A Reddit user reported losing 2,590 USDT in June after connecting their Trust Wallet to Tronify.rent, immediately filing a complaint with the FBI’s Internet Crime Complaint Center after realizing their money was gone.
The group’s attack pattern precisely mirrors approval phishing or wallet drainer tactics. Users are tricked into authorizing transactions, granting permissions that allow attackers to transfer tokens directly out of the victim’s wallet. In response, JP published 12 TRON network addresses on October 4, 2026, linked to the theft operation. He also flagged the website tron.store, suspected to belong to the same group, which PhishDestroy similarly classified as a high phishing risk.
AI Recommendations Are No Guarantee
The Tronify.rent incident demonstrates that AI assistants cannot serve as a sole security benchmark. When wallet transaction approvals are involved, manual verification across multiple sources remains an irreplaceable final line of defense.
Originally reported by crypto.news.
Read also: Bitget Hacker Erases $388M Trail via Zcash - Law Enforcement Only Recovers 0.3%
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
