1. Home
  2. Cybersecurity

Cybersecurity

User loses $32 million spWETH in a sophisticated phishing attack

According to crypto security firm Scam Sniffer, 9,145 users were victims of phishing attacks during August 2024, losing funds as a result.

A wallet ending in "e57" fell prey to a sophisticated phishing attack on Sept. 27 that left the wallet drained of 12,083 Spark Wrapped Ethereum tokens (spWETH), valued at $32 million.

According to security firm CertiK, 10,000 spWETH, valued at approximately $26 million, was initially sent to a wallet beginning with "0x471c." A portion of these funds was subsequently transferred to 4 additional wallets.

1,750 Ether (ETH) was transferred to a wallet beginning with the characters "0x105c", 2,613 ETH was sent to a wallet starting with "0x278d", an additional 3,730 ETH to an address beginning with "0x408d", and, finally, approximately 1,865 ETH was transferred to an address beginning in "0xfaf2."

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

MoneyGram admits ‘cybersecurity issue’ behind several-day outage

MoneyGram’s services have been offline since Sept. 20, with the firm confirming the outage is due to a cybersecurity incident three days later.

Financial services firm MoneyGram has admitted its multiday outage is due to a “cybersecurity issue,” and it is working to restore its services with some success.

“MoneyGram recently identified a cybersecurity issue affecting certain of our systems,” the company said in a Sept. 23 X post.

It comes days after users reported that its services were down on Sept. 20, and hundreds have reported MoneyGram’s outage in the past 24 hours, according to service status information aggregator DownDetector.

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

Indian Supreme Court recovers YouTube account from XRP scammers

XRP scammers hacked the Supreme Court of India’s YouTube account, and although it was recovered, it lost its subscriber base.

The Supreme Court of India regained control of its official YouTube account shortly after it was hijacked by cryptocurrency scammers selling fake XRP investments.

On Sept. 20, the Supreme Court of India’s YouTube account was used to broadcast a livestream video about fake XRP (XRP) investments featuring Ripple Labs CEO Brad Garlinghouse.

The hackers rebranded the channel to resemble Ripple and deleted all previously uploaded content, as shown in the screenshot below.

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

BingX confirms the resumption of withdrawal services following hack

Monetary losses from the BingX hack were initially reported as totaling $26 million, but the figure has since swelled to $52 million.

BingX — a popular cryptocurrency exchange — has announced that withdrawal services on the platform will resume on Sept. 21, 2024, for certain digital assets.

According to the exchange's announcement, withdrawals for Tether's US dollar stablecoin (USDT), Circle's US dollar stablecoin (USDC), Bitcoin (BTC), Ethereum (ETH), Tron (TRX), and Solana (SOL) will resume first followed by withdrawal services for other tokens and digital assets over the next two weeks.

The exchange notified customers that deposit services would likewise resume in the next several weeks and told clients that withdrawal requests submitted before the disruption of withdrawal services have been canceled and must be resubmitted.

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

Making crypto mainstream requires greater efforts to stop fraud

One of the greatest use-cases of blockchain technologies is the ability to improve security and counter malicious actors, but we need to get serious about it.

We find it easy to talk about the benefits of the digital economy, whether the internet or digital assets, but the costs are often overlooked. Whether the surge in human trafficking that has emerged on social media platforms or the rise of cybersecurity vulnerabilities, the expansion of the digital economy comes with new risks to manage.

The digital asset community is no different and, to scale and become sustainable, it must confront the prevalence of fraud. And, it’s not hard: already distributed ledger technologies are demonstrating their value by solving concrete use-cases. This week in Vienna, Austria, the Austrian National Bank — together with the Complexity Science Hub and other sponsors — are hosting a conference on advances in financial technology, with a wide array of presenters who have researched value-enhancing uses of blockchain technology.

Thanks to pioneering work by the Federal Trade Commission’s Consumer Sentinel, we now have basic statistics on the incidence of fraud, the perpetrators, and the countries that exhibit the greatest violations. Using these data on complaints, Michel Grosz and Devesh Raval from the FTC show that it is possible to identify countries with excess levels of fraud based on their level of exports and to whom they are exporting. We need this caliber of data and the processes to support its collection to make strides in countering fraud.

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

US prosecutors oppose Mango Market exploiter’s motion for acquittal

Following the exploit, Eisenberg claimed he negotiated a settlement with Mango Markets' insurance fund to ensure users retained their money.

Prosecutors for the United States Southern District of New York (SDNY) filed a motion on Sept. 18 opposing Mango Markets exploiter Avraham Eisenberg's request for acquittal or a new trial.

According to the documents filed by SDNY attorneys, the jury correctly convicted Eisenberg by evaluating a "mountain of evidence" beginning with the prosecution's assertion that Mango perpetual swaps are subject to the Commodities Exchange Act.

The federal prosecutors stressed that Eisenberg's defense — arguing the fraud charges do not apply in the case because the defendant did not seek to manipulate the market price of the underlying asset — were materially incorrect and noted the jury instructions on price manipulation. Attorneys for the Southern District of New York asserted:

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

Ethena domain registrar hacked, Ethena Labs warns users to stay away

The Ethena website appears to have suffered a front-end attack, and users are encouraged not to interact with the platform. 

The Ethena website suffered what appears to be a front-end exploit on Sept. 18, and Ethena Labs has cautioned users not to interact with any site or application claiming to be Ethena.

According to a social media post from Ethena Labs, the website's domain registrar account was compromised, and the site is currently deactivated until the issue is resolved.

Ethena Labs also reassured clients that the Ethena protocol was not affected by the exploit and that all customer funds were safe.

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

Attacker drains $1.4M from CUT token pools via mysterious unverified contract

An account used an unreadable function to remove 1.4 million BSC-USD without needing to burn the equivalent LP tokens.

An attacker drained over $1.4 million worth of Bows Coin Synthetic US Dollar (BSC-USD) from a liquidity pool holding CUT tokens on Sept. 10, according to a report from blockchain security platform CertiK.

The CUT token contract relied on a separate, unverified contract to set its “future yield” parameter, and this separate contract was used to drain the BSC-USD through an unknown method.

CertiK reported the event on X.

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

New Android malware steals private keys from screenshots and images

According to a recent FBI warning, North Korean hackers are "aggressively targeting" the crypto industry with “well-disguised” attacks.

A new Android malware called SpyAgent, discovered by software security firm McAfee, can steal private keys stored in screenshots and images on a smartphone’s internal storage.

More specifically, the malware uses a mechanism known as optical character recognition (OCR) to scan images stored on a smartphone and extract words from them. OCR is present in many technologies, including desktop computers, which can recognize, copy, and paste text from images.

McAfee Labs explained that the malware is distributed through malicious links sent through text messages. The cybersecurity company broke down the process, beginning with an unsuspecting user clicking on a link they received.

Read more

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch

Hypernative Secures $16 Million in Series A Funding to Enhance Web3 Security

Hypernative Secures  Million in Series A Funding to Enhance Web3 SecurityHypernative has successfully secured $16 million in a Series A funding round spearheaded by Quantstamp, with other notable investors joining the fray. This new capital will be channeled into enhancing its artificial intelligence (AI)-driven security solutions tailored for the Web3 ecosystem. Hypernative Garners $16M Funding to Fortify Web3 Security With AI Solutions In a blog […]

Trader Says Solana-Based Memecoin That’s up 49x in Under Three Months To Go Much Higher – But There’s a Catch