Bookmarking Crypto Insights
Auto Added by WPeMatico
On May 27, decentralized finance platform Stake DAO suffered an infinite-minting exploit on its Arbitrum protocol. However, Stake DAO core contributors quickly secured the mainnet funds backing the tokens, shut down the vsdCRV bridge, and successfully contained the exploit. Infinite-Minting Loophole Triggers Exploit Decentralized finance ( DeFi), platform Stake DAO confirmed May 27 that its … Read more
Investigators at Soclet have discovered a new supply attack targeting crypto developers using npm, PyPI, and Crates.io packages. The campaign, dubbed Trapdoor, focuses on stealing crypto wallet keys and other secrets from developers in the crypto space. Supply Chain Attack Scheme Trapdoor Targets Developers For Maximum Performance While some malware campaigns target everyday crypto users, … Read more
This research report originates from a multi-part series titled Law and Ledger, which examines one of the most important and unsettled questions in digital-asset law: when, and under what circumstances, crypto falls within the reach of U.S. securities regulation. Written by: Michael Handelsman and Alex Forehand for Kelman.Law This research report contains five additional sections. … Read more
Blockchain investigator ZachXBT first pointed to a possible hack, indicating that $520K were drained so far. Polymarket acknowledged the security event and stressed that it was taking action after the compromise of an alleged private key, explaining that user funds were safe. Polymarket Faces Security Event: No User Funds Affected Polymarket, one of the largest … Read more
A cryptocurrency user, whose assets were stolen, has reignited the debate around user exchange culpability by offering $100,000 to blockchain investigator ZachXBT as a public bounty for finding his stolen funds. He claims 15 years of savings all vanished from a Trust Wallet account and were transferred to KuCoin which has been accused of ignoring … Read more
A self-replicating worm that hijacks GitHub Actions pipelines to publish malicious npm packages has struck again, compromising AntV, echarts-for-react, and Microsoft’s durabletask SDK. Mini Shai-Hulud Exploits GitHub Actions to Hit 16 Million Weekly Downloads The Mini Shai-Hulud campaign, attributed to the threat group Team PCP, does not work the way most supply chain attacks do … Read more
Decentralized finance platform Echo Protocol suffered a security breach on its Monad network deployment after an attacker compromised an administrative key. Liquidity Limits Prevent Massive Losses Echo Protocol, a decentralized finance ( DeFi) platform focused on bitcoin liquidity, was hit by a security exploit on Monday, May 18, after an attacker compromised an administrative key … Read more
The cross-chain communication protocol Layerzero Labs disclosed on Friday that its internal infrastructure was compromised by North Korean hackers and a simultaneous DDoS attack during the KelpDAO breach. Layerzero Labs Apologizes for Lazarus Group Security Breach Response Layerzero Labs issued a candid apology for a three-week communication silence following a security breach involving the Lazarus … Read more
Binance has rolled out a new safety feature called ‘Withdraw Protection,’ letting users freeze outgoing transfers from their accounts for up to seven days, a direct response to a global surge in violent physical attacks targeting crypto holders. Key Takeaways: Binance launched ‘Withdraw Protection’ on May 4, offering users a provision to block outgoing transfers … Read more
Ripple will share DPRK-linked threat intelligence with Crypto ISAC to help crypto firms screen applicants, contractors, and vendors. The program covers fraud domains, wallets, and compromise indicators tied to active campaigns. Key Takeaways: Ripple will provide Crypto ISAC members intelligence on DPRK-linked fraud domains, wallets, and campaigns. Security teams can use enriched identity signals to … Read more