Crypto Whale Drained via Ethereum Permit Feature Phishing Attack
The exploitation of Ethereum's Permit signature for gasless, off-chain approvals creates a stealthy vector for asset draining, circumventing traditional security alerts.
Coinbase Customers Targeted by Insider Data Theft and Social Engineering
A compromised third-party vendor employee facilitated data theft, enabling social engineering attacks that drained user funds through impersonation.
UXLINK Multi-Signature Wallet Compromised, $11.3 Million Drained, Tokens Minted
A `delegateCall` vulnerability in UXLINK's multi-signature wallet enabled unauthorized administrative control, leading to asset exfiltration and arbitrary token minting, underscoring critical smart contract design and access control failures.
UXLINK Exploiter Loses $48 Million to Sophisticated Phishing Attack
A malicious `increaseAllowance` signature allowed a phishing group to drain $48 million from a prior UXLINK exploiter, underscoring persistent social engineering risks.
Venus Protocol User Funds Drained by Sophisticated Phishing Attack
A malicious transaction approval enabled an attacker to siphon millions from a Venus Protocol user, underscoring critical user-side vulnerability.
UXLINK Multi-Signature Wallet Compromised, $11.3 Million Drained
A delegate call vulnerability in UXLINK's multi-signature wallet granted an attacker administrative control, enabling unauthorized asset transfers and unlimited token minting.
UXLINK Multi-Signature Wallet Exploited, Billions of Tokens Minted
A `delegateCall` vulnerability in a multi-signature wallet allowed administrative control takeover and unauthorized token minting, posing a critical risk of asset inflation and value erosion.
UXLINK Multi-Signature Wallet Compromised via Delegate Call Exploit
A delegate call vulnerability in multi-signature wallet logic enabled unauthorized admin access, leading to asset drain and token inflation.
UXLINK Multi-Signature Wallet Exploited, Attacker Loses Funds to Phishing
A delegate call vulnerability in UXLINK's multi-signature wallet enabled unauthorized minting and asset drain, compounded by the attacker's subsequent phishing loss.
