Virtuals Protocol Discord server hacked, fake Google links posted
The security incidents occurred days after a researcher discovered a critical bug in a Virtuals Protocol audited contract, which was fixed. Go to Source
Exploits
Auto Added by WPeMatico
North Korean hacker BlueNoroff targets crypto firms with new malware
According to cybersecurity firm Recorded Future, North Korean hacker groups have stolen approximately $3 billion in funds since 2017. Go to Source
Online Casino MetaWin hacked for $4 million — ZackXBT
According to cybersecurity firm CertiK, losses from digital asset scams and cybersecurity exploits topped $129 million in October. Go to Source
Chinese trader laundered more than $17M for Lazarus Group in 25 hacks
The North Korean cybercrime group is credited with some of the biggest crypto hacks, including the $600 million Ronin bridge exploit. Go to Source
EigenLayer X account compromised, shares malicious airdrop link
Users should not click on any airdrop links shared in EigenLayer’s recent post, warned onchain detective ZachXBT. Go to Source
Ambient Finance website hacked, team warns users to wait for fix
In 2024, malware spread through Python Package Index, text messages, fraudulent macOS programs, and even automated email threads. Go to Source
Ledger users targeted by malicious ‘clear signing’ phishing email
Phishing attacks are a growing concern in the crypto industry, accounting for over $46 million worth of cryptocurrency stolen during September. Go to Source
User loses $32 million spWETH in a sophisticated phishing attack
According to crypto security firm Scam Sniffer, 9,145 users were victims of phishing attacks during August 2024, losing funds as a result. Go to Source
BingX confirms the resumption of withdrawal services following hack
Monetary losses from the BingX hack were initially reported as totaling $26 million, but the figure has since swelled to $52 million. Go to Source
Ethena domain registrar hacked, Ethena Labs warns users to stay away
The Ethena website appears to have suffered a front-end attack, and users are encouraged not to interact with the platform. Go to Source
