sock

Компания безопасности блокчейна Socket обнаружила 16 поддельных расширений кошельков Rabby и OKX в браузере Firefox. По данным Socket, Mozilla сняла эти расширения 5 октября.Socket отметила, что удаление этих вредоносных расширений не может гарантировать безопасность пользователей кошельков, чьи мнемонические фразы уже были скомпрометированы.

Согласно данным GMGN, под влиянием сигналов BONK GUY рыночная капитализация SOCK превысила 13,86 миллиона долларов, установив новый рекорд, в настоящее время составляет 12,33 миллиона долларов, за 1 час рост составил 269,4%.

Сообщение ChainCatcher, согласно отчету Decrypt, компания безопасности Socket опубликовала результаты исследования, в котором 77 расширений Firefox были связаны с их так называемой "фабрикой кражи кошельков", из которых 40 были подтверждены как злонамеренные.Эти расширения маскируются под Web3 продукты, такие как OKX, Rabby Wallet, TronLink, вводя пользователей в заблуждение, чтобы они импортировали свои кошельки, или используя модифицированный код настоящих кошельков, чтобы украсть мнемонические фразы и приватные ключи во время ввода. Записи о подписи Mozilla показывают, что эта активность продолжалась с 9 марта по 3 августа, и на момент отчета Socket все еще оставалось несколько расширений в сети.Примерно половина из этих расширений демонстрирует реалистичный интерфейс кошелька и требует от пользователей импортировать существующий кошелек, тем самым перехватывая введенные мнемонические фразы или приватные ключи; еще 13 являются модифицированными версиями Rabby, которые, работая нормально, отправляют данные учетных записей, хранящихся в кошельке, на внешние серверы; еще 5 специально собирают сохраненные учетные данные и содержимое буфера обмена.Кроме того, 37 расширений маскируются под генераторы паролей, переключатели темного режима, VPN, конвертеры валют и инструменты для заметок, но на самом деле работают как приложения для спортивных счетов, которые используют одни и те же жестко закодированные учетные данные. 9 подтвержденных злонамеренных расширений изначально были выпущены в виде приложений для счетов по футболу, баскетболу и т.д., а последующие обновления заменили их на код кражи кошельков.Socket назвала эту активность "фабрикой кражи кошельков", но предупреждает, что не все расширения подтверждены как контролируемые одним и тем же оператором. Команда Socket заявила, что любые пользователи, которые вводили мнемонические фразы или приватные ключи в этих расширениях, должны считаться "постоянно скомпрометированными" и немедленно перевести свои средства на новый кошелек, так как удаление расширения не отменяет уже отправленные в другое место мнемонические фразы.

According to market news, the European Cybercrime Centre, in collaboration with the U.S. Department of Justice and other agencies, has announced the dismantling of a malicious proxy service network named "SocksEscort" and the freezing of $3.5 million in cryptocurrency related to the case.The network is said to have compromised over 369,000 routers and IoT devices in 163 countries worldwide, providing users with over 35,000 proxies in recent years. The European Cybercrime Centre stated that 34 domain names and 23 servers were seized in operations across 7 countries, and payment platforms associated with the service are estimated to have received over $5.7 million in cryptocurrency. The investigation began in June 2025 and found that the infected devices were primarily used to facilitate criminal activities such as ransomware and DDoS attacks.The U.S. Department of Justice has charged that criminals used the proxy service to conceal their location and commit fraud, including bank and cryptocurrency account takeovers, citing multiple victim loss cases, including a New York cryptocurrency exchange customer who was scammed out of $1 million.

Binance announces the upgrade of the U-based contract WebSocket URL architecture to support traffic growth and enhance overall stability and scalability. The new architecture is divided into three specialized base URLs by data category: Public (high-frequency public market data), Market (regular market data), and Private (user data stream).The new WebSocket URL is available for use starting today, and the old URL will be permanently decommissioned on April 23, 2026. Additionally, this upgrade continues to support both ws and stream access modes and combined subscriptions.

ChainCatcher message, the Socket Security Research Team has discovered four malicious npm packages that target Binance Smart Chain (BSC) and Ethereum users' wallets. These packages are pancake_uniswap_validators_utils_snipe (350 downloads), pancakeswap-oracle-prediction (445 downloads), ethereum-smart-contract (305 downloads), and env-process (1,054 downloads), with a total download count exceeding 2,100.The attackers use obfuscated JavaScript code to calculate the percentage of the target wallet balance and attempt to transfer up to 85% of the assets to a wallet address under their control.

ChainCatcher message, according to the official announcement, the Binance contract coin-based Websocket will undergo a system upgrade on October 10, 2024, at 14:00 (UTC+8). The upgrade is expected to take 6 hours. The main content of this upgrade includes:Improving the performance and stability of the Binance coin-based contract WebSocket serverDuring the upgrade, there may be disconnections from the Binance coin-based contract WebSocket server or brief data loss. In such cases, API users can reconnect to the coin-based contract WebSocket.During the system upgrade, coin-based contract trading will not be affected.

ChainCatcher message, according to the official announcement, the Binance contract coin-based WebSocket will undergo a system upgrade on September 26, 2024, at 14:00 (UTC+8), with an estimated upgrade duration of 8 hours.The main content of this upgrade:Improve the performance and stability of the Binance coin-based contract WebSocket serverDuring the upgrade, there may be disconnections from the Binance coin-based contract WebSocket server or brief data loss. If this occurs, API users can reconnect to the coin-based contract WebSocket.During the system upgrade, coin-based contract trading will not be affected.

ChainCatcher message, according to the official announcement, Binance will update the request weight adjustment and WebSocket user data requests on September 3, 2024, at 14:00 (UTC+8). Binance encourages users to switch to the updated version endpoint for better performance and functionality.

ChainCatcher news, Uniswap Labs announced on social media that to celebrate the 5th anniversary of the SOCKS token, they are launching a limited-time minting of 5OCKS NFT on the Zora platform for seven days.

ChainCatcher news, the cross-chain interoperability protocol Socket has announced a customer compensation plan in response to the hacking incident, offering 100% compensation to all affected users.It is reported that Bungee, the bridging aggregator developed by Socket, was hacked last week, resulting in a loss of approximately $3.3 million. After statistics, Socket stated that the incident affected a total of 232 users and involved 5 types of assets. Earlier this week, Socket has recovered 1,032 ETH, worth about $2.2 million, and to fully compensate user losses, Socket will also contribute an additional $1.1 million for compensation.

ChainCatcher news, the blockchain interoperability protocol Socket tweeted that it has recovered 1,032 ETH from the funds involved in the hacking incident and will soon release a recovery and distribution plan for users.

ChainCatcher message, MetaMask posted on platform X stating that MetaMask Bridge users are not affected by the Socket vulnerability. MetaMask pointed out that it adopted a unique architecture when designing its cross-chain bridge contracts, aimed at preventing such attacks.

ChainCatcher message, interoperability protocol Socket has published a security incident update on X: Socket is now back up and running, affected contracts have been paused, and losses have been fully controlled. The bridging of Bungee and most of its partner frontends has been restored. A detailed post-mortem analysis and follow-up steps will be announced soon.Socket also stated: "Be cautious of fake Socket accounts attempting to phishing you in replies. Please make sure to verify accounts carefully before taking any action."

ChainCatcher news, according to on-chain analyst Yu Jin's monitoring, the attacker of the cross-chain protocol Socket has exchanged the stolen USDC and USDT stablecoins for 1,137 ETH at an average price of $2,564.

ChainCatcher news, according to monitoring by Shield, the cross-chain protocol Socket has been attacked, with at least 3.3 million dollars in funds stolen. The hacker exploited a bad route to steal user funds from the SocketGateway contract.

ChainCatcher news, according to FinSMEs, cryptocurrency investment application service provider Sock announced the completion of a $2.8 million seed round financing, led by Haven Ventures, with participation from Designer Fund, Expansion, Spacecadet Ventures, Sunflower Fund, and Olive Capital.

ChainCatcher news, the cross-chain protocol Socket Protocol announces the completion of a $5 million financing round, with participation from Coinbase Ventures and Framework Ventures. The new funds will be used to expand the collaboration between Socket and Coinbase, including providing cross-chain services for developers and users of Coinbase Wallet and the Base network.

ChainCatcher news, the open-source code vulnerability detection tool Socket announced the completion of a $20 million Series A financing round, led by Andreessen Horowitz (a16z), with participation from Abstract Ventures, Wndrco, Unusual Ventures, and angel investors including Box co-founder Aaron Levie, Figma co-founder Dylan Field, Okta co-founder Frederic Kerrest, Vercel CEO Guillermo Rauch, and Eventbrite co-founders Julia and Kevin Hartz. The new funds will be used to expand the team and support the integration of more programming languages.According to reports, its CEO Feross Aboukhadijeh stated that the newly raised funds, combined with the previous $4.6 million seed investment, bring the company's total financing to $24.6 million.