UXLINK Multi-Signature Wallet Compromised via Delegate Call Vulnerability
A critical delegate call flaw in UXLINK's multi-sig wallet granted unauthorized administrative control, enabling significant asset exfiltration.
UXLINK Multisig Wallet Compromised by DelegateCall Vulnerability
A critical delegateCall vulnerability in UXLINK's multisig wallet allowed admin takeover and unauthorized minting, posing severe systemic risk.
UXLINK Multi-Signature Wallet Compromised via DelegateCall Vulnerability
A delegateCall vulnerability in a multi-signature wallet enabled unauthorized administrative control, leading to significant asset drain and token inflation.
UXLINK Multi-Signature Wallet Compromised via Delegate Call Exploit
A delegate call vulnerability in multi-signature wallet logic enabled unauthorized admin access, leading to asset drain and token inflation.
UXLINK Multi-Signature Wallet Compromised, Billions of Tokens Minted
A delegate call vulnerability in UXLINK's multi-signature wallet granted administrative control, enabling unauthorized token minting and significant financial loss.
NPM `debug` Package Compromised by Phishing, Malicious Code Redirects Crypto
A compromised npm package account enabled malicious code injection, posing an immediate risk of cryptocurrency theft for browser-based application users.
UXLINK Multi-Signature Wallet Compromised, $11.3 Million Drained
A delegate call vulnerability in UXLINK's multi-signature wallet granted an attacker administrative control, enabling unauthorized asset transfers and unlimited token minting.
UXLINK Exploit Hacker Loses $48 Million to Phishing Attack
A sophisticated phishing scheme drained $48 million from a UXLINK exploiter, demonstrating persistent social engineering vulnerabilities across the digital asset landscape.
UXLINK Exploiter Phished, Loses $48 Million in Arbitrum Token Theft
Even sophisticated attackers are vulnerable to basic phishing, demonstrating persistent risk across the digital asset landscape.
THORChain Founder’s Wallet Drained by Social Engineering Attack
A compromised personal MetaMask wallet, accessed via social engineering, underscores critical user-side private key risk.
UXLINK Exploiter Loses $48 Million to Sophisticated Phishing Attack
A malicious `increaseAllowance` signature allowed a phishing group to drain $48 million from a prior UXLINK exploiter, underscoring persistent social engineering risks.
UXLINK Multi-Signature Wallet Compromised, $11.3 Million Drained, Tokens Minted
A `delegateCall` vulnerability in UXLINK's multi-signature wallet enabled unauthorized administrative control, leading to asset exfiltration and arbitrary token minting, underscoring critical smart contract design and access control failures.
UXLINK Multi-Signature Wallet Compromised, $11.3 Million Drained in Exploit
A critical `delegateCall` exploit in UXLINK's multi-signature wallet enabled unauthorized administrative control, leading to an $11.3M asset drain.
NPM Supply Chain Compromise Enables Widespread Cryptocurrency Wallet Drains
A phishing-induced compromise of a critical NPM developer account injected malicious code, enabling silent cryptocurrency address substitution during transactions.
JavaScript Supply Chain Attack Threatens DeFi Ecosystem
A compromised JavaScript package, widely integrated across DeFi, enables transaction hijacking, posing a systemic risk to user funds and operational integrity.
DeFi Trader Wallet Drained $6.5m via Phishing Permit Signatures
A sophisticated phishing campaign leveraging malicious permit signatures bypassed seasoned DeFi user defenses, resulting in a multi-million dollar asset drain.
Crypto.com Employee Account Compromised, User Personal Data Exposed
A social engineering breach targeting exchange personnel enabled unauthorized access to sensitive user data, underscoring critical human element vulnerabilities.
NPM Supply Chain Attack Compromises Crypto Wallets, DeFi Platforms
A supply chain compromise of critical NPM packages enables stealthy transaction hijacking, posing systemic risk to browser-based crypto operations.
Ethereum Whale Loses $6m to Gas-Free Phishing Attack
A critical vulnerability in off-chain approval mechanisms allowed a sophisticated phishing attack to drain $6 million in assets.
Lazarus Group Targets Venus Protocol, $13.5 Million Theft Recovered
A sophisticated phishing attack, attributed to an Advanced Persistent Threat group, attempted to drain $13.5 million from Venus Protocol, highlighting persistent social engineering risks.
Web3 Wallet Transaction Simulation Spoofing Drains User Funds
Attackers manipulate Web3 wallet transaction previews via time-delay exploits, enabling full wallet drains after user approval, a critical flaw in user-facing security.
NPM Package Compromise Redirects Cryptocurrency Transactions via Phishing Attack
A supply chain compromise of critical npm packages, initiated by a phishing attack, injects malicious code to siphon browser-based cryptocurrency transactions.
User Wallet Drained by Phishing Permit Signature Exploit
Malicious permit signatures leveraging EIP-2612 enable off-chain asset drainage, posing a critical risk to DeFi users' staked and wrapped holdings.
Crypto Developers Targeted by Phishing Malware Campaign
Attackers leverage social engineering to distribute macOS malware, compromising sensitive user data and risking asset theft.
THORChain Founder’s Personal Wallets Compromised via Social Engineering
A sophisticated social engineering attack leveraging compromised communication channels drained $1.35 million from a prominent founder's private wallets.
User Wallets Drained by Fake Zoom Social Engineering Attack
Malicious software delivered via a compromised communication channel enabled private key exfiltration, underscoring the pervasive threat of social engineering.
Safe Wallet User Drained by Malicious Request Finance Contract Impersonation
A sophisticated contract impersonation attack leveraged near-identical addresses to trick a Safe multi-sig wallet user into unknowingly approving a malicious batch transaction, resulting in a $3 million fund loss.
Investor Loses $6 Million to Phishing-Induced Multicall Transaction
A deceptive link led to an unauthorized multicall transaction, demonstrating how social engineering can bypass user intent and drain digital assets.
Crypto Investor Suffers $6 Million Loss from Phishing Multicall Exploit
A deceptive phishing attack leveraged a malicious link to induce an unsuspecting user into authorizing a multicall transaction, leading to a significant asset drain.
