A cryptocurrency enthusiast lost $5,000 after connecting to a hotel's unsecured Wi-Fi network during a family vacation. The user, who was using a Phantom wallet, unknowingly fell victim to a man-in-the-middle attack. The attacker exploited the public Wi-Fi's lack of security to inject malicious code into a website the user visited, leading to unauthorized access to the user's wallet. The breach occurred when the user, while performing a token swap on the JupiterExchange platform, inadvertently approved a malicious wallet request disguised as a legitimate transaction. This approval allowed the attacker to drain the user's SOL, tokens, and NFTs. The incident highlights the risks of using public Wi-Fi for cryptocurrency transactions and the importance of scrutinizing wallet requests, even from trusted platforms.