NPM Package Compromise Redirects Cryptocurrency Transactions via Phishing Attack
A supply chain compromise of critical npm packages, initiated by a phishing attack, injects malicious code to siphon browser-based cryptocurrency transactions.
KiloEx Loses $7.5 Million to Price Oracle Manipulation Exploit
A critical missing access control check in KiloEx's MinimalForwarder contract allowed attackers to manipulate price oracles, draining $7.5M.
New Gold Protocol Suffers $2m Flash Loan Price Oracle Manipulation
A flash loan exploited New Gold Protocol's single-source price oracle, enabling asset manipulation and $2M theft, highlighting critical DeFi risk.
Credix Protocol Exploited via Admin Wallet, Vanishes with $4.5 Million
A compromised administrative key enabled unauthorized token minting and liquidity drainage, culminating in a suspected insider-driven rug pull.
AI-Generated YouTube Scams Exploit Users with Malicious Trading Bots
Sophisticated AI-driven social engineering leverages fake trading bot smart contracts, enabling attackers to drain user funds via deceptive tutorials.
Chrome V8 Engine Flaw Enables Crypto Wallet Drains
A critical type confusion vulnerability in Chrome's V8 engine permits arbitrary code execution, directly exposing user crypto assets to theft.
Evolving Crypto Scams Cost Users $25.4 Million in September
Evolving social engineering and technical attack vectors exploit user vigilance and smart contract weaknesses, leading to escalating financial losses.
X Employees Targeted by Bribery Ring to Reinstate Crypto Scam Accounts
A sophisticated bribery network exploited platform moderation processes, enabling cybercriminals to perpetuate widespread cryptocurrency fraud.
Phemex Hot Wallets Compromised, $85 Million in Crypto Drained
A breach of Phemex's hot wallets, likely through compromised private keys, allowed threat actors to drain over $85 million, underscoring critical centralized exchange vulnerability.
