Web3 cyber security company GoPlus issued a security alert, be sure to copy the correct contract address from the official, do not search for the token Ticker directly from the wallet and market software, it is easy to appear the same name copy/Pixiu.
The founder of AabyssTeam issued a security alert on X, Cyberhaven security company was attacked by phishing emails, resulting in malicious code implanted in the browser plug-in released by it, trying to read the browser cookies and passwords of uploaded users. Subsequent analysis of the code found that multiple browser plug-ins were attacked, including Proxy SwitchyOmega (V3), etc. These plug-ins affected 500,000 users in the Google Store and have been followed. Slow...
On December 25th, Scam Sniffer issued a security alert. Users reported that visiting a Singapore news portal would be redirected to the fake URL of Pudgy Penguins. After investigation, it was revealed that this was part of a larger malicious advertising campaign. The principle of the attack is as follows: Malicious ads are served through the Google Ad Network; ads load suspicious code from Adloox; code checks if you have a web3 wallet; if detected, redirects to Pudgy Penguins.
SlowMist has issued a security alert. The project Oceans Gallerie On SUI on SUI is at high risk and is suspected of RugPull. Users are requested to remain vigilant.
On November 18th, OneKey Security Labs issued a security alert, and multiple Dexx trading platform users reported abnormal login attempts in their account-linked mailboxes. OneKey advises users to take immediate security measures, especially users who log in to Dexx and mailboxes with the same password: 1) Immediately change all Web2 account passwords using the same password; 2) Completely abandon password combinations that may have been leaked; 3) Pay special attention to the security of email ...
Blockchain security firm SlowMist has issued a security alert, saying it has detected suspicious activity related to vETH tokens. SlowMist reminds users to remain vigilant and pay attention to asset safety. According to Cyvers Alerts analysis, the hackers caused about $440,000 in losses through price manipulation. The attackers first obtained funds in the BNB Chain through Tornado Cash, and then crossed the chain to Ethereum through Bridgers.
Web3 cyber security company GoPlus has issued a security alert revealing a new type of scam targeting Telegram users. Scammers pose as Fragment's official Mini Program and send high-priced takeover offers to anonymous account holders via private messages. Once users click on the Mini Program link provided by the scammer, they may unknowingly authorize the account, resulting in the theft of wallet assets. GoPlus pointed out that since the counterfeit robot is nearly identical to the official Mini...
OpenAI released a safety work report in preparation for the launch of GPT-40. Additionally, U.S. Democratic lawmakers wrote to OpenAI CEO Altman about AI safety.
On August 1st, Astroport released a security incident update on X: The attacker's ASTRO on Neutron has been seized in the Astroport Treasury. The attacker's Terra address has been blacklisted, making it impossible to conduct any transactions. The IBC Hook vulnerability has been fixed. In total, the attackers stole about 58 million ASTRO and bridged about 33 million of them to Neutron. The attackers exchanged about 13 million ASTRO for 124,000 axlUSDC and sent it to an Ethereum address. There are...
On July 29th, Casper Blockchain released a security incident update. It found security bugs on July 26th. The number of affected accounts has been confirmed to be less than 15. The Casper team has developed a patch and is testing it. To prevent further losses, the validator community has decided to suspend consensus and block production. The Casper network remains online, and consensus and verification will be restored after the patch is issued and verified. The Casper Association will conduct a...
On July 24, Velocore released a security incident update, saying that it will liquidate the treasury on zkSyncEra and Linea before the available funds are further reduced to make up for user losses as soon as possible. Claims will be enabled directly on the homepage soon, please beware of such scam links. If stolen funds are recovered in the future through continued investigation, the current snapshot will be used for additional distribution. Velocore suffered a security bugs on June 2 that resu...
On June 25th, Bitcoin DeFi platform ALEX Lab released a security incident update saying that there is a large amount of transaction evidence linking the attack to the hacker group Lazarus Group. It is actively working with international law enforcement and cyber security experts to counter the impact of this attack and recover lost assets. Alex Lab is implementing enhanced security protocols to strengthen the platform's ability to withstand similar threats. As the investigation progresses and re...