UXLINK Exploiter Loses $48 Million to Sophisticated Phishing Attack
A malicious `increaseAllowance` signature allowed a phishing group to drain $48 million from a prior UXLINK exploiter, underscoring persistent social engineering risks.
JavaScript Supply Chain Attack Threatens DeFi Ecosystem
A compromised JavaScript package, widely integrated across DeFi, enables transaction hijacking, posing a systemic risk to user funds and operational integrity.
Truflation Suffers $5 Million Loss from Malware Compromising Wallets
A malware attack targeting treasury multisig and personal wallets led to a significant $5 million exfiltration, underscoring critical off-chain security vulnerabilities.
North Korean Hackers Deploy BeaverTail Malware via Fake Crypto Job Offers
A sophisticated social engineering campaign leverages fake job opportunities to distribute advanced malware, directly compromising user credentials and crypto wallets.
Indodax Exchange Transaction System Compromised, $18.2 Million Exfiltrated
A compromised transaction system on a major exchange enabled the exfiltration of $18.2 million, highlighting critical operational security gaps.
Ethereum Whale Loses $6m to Gas-Free Phishing Attack
A critical vulnerability in off-chain approval mechanisms allowed a sophisticated phishing attack to drain $6 million in assets.
Lazarus Group Targets Venus Protocol, $13.5 Million Theft Recovered
A sophisticated phishing attack, attributed to an Advanced Persistent Threat group, attempted to drain $13.5 million from Venus Protocol, highlighting persistent social engineering risks.
THORChain Founder’s Personal Wallets Compromised via Social Engineering
A sophisticated social engineering attack leveraging compromised communication channels drained $1.35 million from a prominent founder's private wallets.
Chrome V8 Engine Vulnerability Exposes Crypto Wallets to Theft
A critical "Type Confusion" bug in Chromium's V8 engine allows remote code execution, enabling attackers to drain crypto wallets via malicious websites.
