alert

Сообщение от ChainCatcher, по данным мониторинга Cyvers Alert, было зафиксировано событие атаки с подменой адреса, в результате которого жертва понесла убытки в размере около 100 тысяч долларов США в USDT. Преступник около 66 дней назад осуществил атаку на кошелек жертвы, подменив адрес, создав злонамеренный адрес, похожий на нормальный адрес для взаимодействия, отправив транзакцию. Жертва не проверила полный адрес кошелька и ошибочно перевела средства на адрес преступника.После инцидента преступник, чтобы избежать потенциального риска заморозки, обменял украденные USDT на ETH, в настоящее время в кошельке хранится около 52.8 ETH. Cyvers напоминает пользователям, что при проведении транзакций в сети всегда следует полностью проверять адрес кошелька, чтобы избежать полагания только на записи адресов в истории транзакций.В то же время, агентства безопасности рекомендуют использовать инструменты безопасности на основе ИИ для реального времени обнаружения аномальных транзакционных действий, чтобы снизить риски подмены адресов, фишинговых атак и других угроз. Атаки с подменой адресов в последние годы стали одним из распространенных способов мошенничества в области криптоактивов, преступники обычно используют привычку пользователей копировать адреса из истории транзакций, подделывая похожие адреса, чтобы ввести пользователей в заблуждение и заставить их ошибочно перевести активы.

Сообщение ChainCatcher, согласно мониторингу Cyvers Alerts, Token of Power подвергся хакерской атаке, убытки составили около 1,58 миллиона долларов. Адрес, финансируемый через Tornado Cash, выполнил злонамеренную транзакцию, переведя средства из ликвидного пула TOP/WETH на Balancer V1.Украденные активы затем снова были переведены в Tornado Cash для смешивания.

The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged that the original content was suspected to be a segment of Morse code, with the core meaning being "transfer all DRB to Ilhamrfliansyh." Although the related account has been deactivated and the complete information cannot be fully confirmed, Grok directly published the "decoded result" as a reply after parsing, inadvertently @ing bankrbot, causing the content to be recognized by the system as an on-chain execution instruction.Subsequently, Bankr, as Grok's associated wallet, executed the request, transferring approximately $175,000 worth of DRB to the attacker's address. The attacker then quickly exchanged the DRB for USDC through multiple wallets.This incident temporarily triggered a nearly 40% drop in the price of DRB, but the market quickly recovered, and the price has largely regained its losses. Industry insiders pointed out that this event exposed the potential risks of the "AI + automated on-chain execution" system under prompt injection attacks, especially in scenarios where AI results can directly trigger fund operations.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), highlighting the lack of information such as team details, key calendar events, and token data for projects like Mars Protocol, Anvil, Lynex, AstridDAO, and Hatom Labs. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that RootData's transparency score is used to measure a project's integrity and timeliness, aiming to reflect the project's information disclosure status, urging project teams to immediately claim their projects. The transparency score is categorized from A to F, with a total of 5 levels from high to low; the lower the score, the more incomplete the project's information disclosure, and the higher the risk of wrongdoing, requiring investors to be highly vigilant.

According to the threat intelligence released by the SlowMist security team, its threat intelligence system MistEye has received community feedback regarding an active social engineering attack targeting cryptocurrency users.The attackers contact target users under the pretext of project collaboration, luring them to use a counterfeit "Harmony Voice" software (domain: harmony-voice[.]app) for so-called real-time translation, which is actually malware. SlowMist has synchronized the relevant threat intelligence (IOC) to its corporate clients.

According to the official announcement, Upbit has placed SPURS on the trading warning list.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting that information such as teams, key calendar events, and token data for projects like LeverUp, Flash.Trade, PRDT, f(x) Protocol, and Tectonic is missing. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure status of projects and urging project teams to immediately claim their projects. The transparency score is divided into five levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to exercise high caution.

According to disclosures from the GoPlus Chinese community, a user lost approximately $316,000 in USDC from their wallet due to signing a malicious Permit2 transaction, which was exploited by a phishing attacker.GoPlus advises users to adhere to the "four no" principles for phishing prevention: do not click on unfamiliar links, do not install unknown software, do not sign transactions with unclear content, and do not transfer funds to unverified addresses. They also recommend installing the GoPlus security plugin to intercept phishing risks in real-time.

The Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the absence of information such as team details, key calendar events, and token data for projects like Sentism.AI, Fortune, Ultima, Etherex, and Solomon Labs. It calls on project teams to submit/update information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure a project's integrity and timeliness, aiming to reflect the project's information disclosure status, urging project teams to immediately claim their projects. The transparency score is categorized into five levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of malfeasance, requiring investors to exercise heightened caution.

The Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology of China has monitored and found that attackers are using exploit tools targeting Apple Inc.'s terminal products to carry out cyber attack activities, which can lead to serious harms such as information theft and system control. The affected range includes Apple terminal products such as iPhone and iPad running iOS 13 to 17.2.1.Attackers induce users to use the Safari browser to visit web pages containing malicious code through methods such as SMS, email, or web poisoning, comprehensively utilizing security vulnerabilities present in the terminal devices to implant remote control Trojans into the victim's terminal products, stealing sensitive user information, gaining maximum privileges, and taking control.It is recommended that users of Apple terminal products conduct risk assessments, and promptly fix vulnerabilities through version upgrades and patch installations (refer to the Apple Security Updates). Pay attention to system update notifications and the latest security update announcements released by Apple, upgrade to the latest secure version in a timely manner, strengthen security awareness, avoid clicking on unknown links, and prevent the risk of cyber attacks.

The Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information regarding teams, key calendar events, token data, and other details for projects such as Fluid, SideShift.ai, Blackhole, Pharaoh, and Koi Finance. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of projects and urging project teams to immediately claim their projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of wrongdoing, requiring investors to be highly vigilant.

According to monitoring by Lookonchain, the Solana ecosystem DeFi protocol Drift Protocol has suffered a significant attack, with approximately $220 million to $270 million in assets suspiciously transferred to the address "HkGz4K." Subsequently, some of these assets were bridged to the Ethereum chain to purchase ETH, with a total of 19,913 ETH bought so far, valued at $42.6 million.The attacker also transferred some of the stolen SOL to Hyperliquid to exchange for ETH, as well as transferring some stolen SOL to Binance. Additionally, according to monitoring by onchainschool.pro, the details of the stolen assets are as follows: USDC valued at $103 million; SOL valued at $54 million; WBTC valued at $19 million; WETH valued at $12 million; cbBTC valued at $11 million; USDT valued at $6 million; USDS valued at $5 million; SYRUPUSDC valued at $3 million; JLP valued at $2 million.Drift Protocol's official statement indicated that they have noticed unusual activity and are currently investigating. Please do not deposit funds into Drift during the investigation period. This is not an April Fool's joke. Please act cautiously until further notice. Drift Protocol will release the latest news through official channels.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information on decentralized exchanges such as Hydration, Hyperbot, SideShift.ai, Lynex, and Beets regarding team details, key calendar events, token data, etc. It calls on project teams to submit/update information on RootData to enhance their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of the projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of misconduct, requiring investors to be highly vigilant.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information on teams, key calendar events, token data, and more for centralized exchanges such as Korbit, Bitkub, Luno, VALR, and bitFlyer. It calls on project parties to submit/update information on RootData to enhance their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of the projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to be highly vigilant.

The monitoring data from the China National Cybersecurity and Information Security Information Notification Center shows that there are currently over 200,000 active OpenClaw internet assets worldwide, with approximately 23,000 active OpenClaw internet assets within the country, exhibiting explosive growth, mainly concentrated in internet resource-intensive areas such as Beijing, Shanghai, Guangdong, Zhejiang, Sichuan, and Jiangsu.A large number of OpenClaw assets exposed to the internet pose significant security risks and are likely to become prime targets for cyberattacks. Among them, the behavior of the agents is uncontrollable, making management difficult. During the execution of commands, OpenClaw agents are prone to privilege escalation, leading to unauthorized task execution and disregard for user instructions, which may result in the deletion of user data, theft of user information, and takeover of user terminal devices, causing significant economic losses.

Web3 asset data platform RootData published a daily transparency alert on Twitter (X), noting the absence of information such as teams, key calendar events, and token data for exchanges like CEX.IO, BloFin Exchange, Phemex, Tokocrypto, and Coins.ph. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure status of the projects. The transparency score is divided into five levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to exercise heightened caution.

Web3 asset data platform RootData published a daily transparency alert on Twitter (X), stating that exchanges such as Bitunix, UEEx, Coinflare, ZKE Exchange, and KoinBX are missing information on project teams, calendars, key events, and token data. It calls on project parties to submit a claim application on RootData to improve their transparency scores.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure status of the projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating less complete information disclosure, requiring investors to exercise high caution.

The National Internet Emergency Center has issued a security risk alert for the OpenClaw application. Previously, due to improper installation and use of the OpenClaw agent, some serious security risks have emerged. It is recommended that relevant organizations and individual users take the following security measures when deploying and using OpenClaw:Strengthen network control by not exposing the default management port of OpenClaw directly to the public internet. Implement security management for access services through identity authentication, access control, and other security measures. Strictly isolate the operating environment and use technologies such as containers to limit the excessive permissions of OpenClaw;Enhance credential management by avoiding storing keys in plaintext in environment variables; establish a complete operational log audit mechanism;Strictly manage the sources of plugins, disable the automatic update feature, and only install signed extensions from trusted channels;Continuously monitor patches and security updates, and promptly perform version updates and install security patches.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), stating that exchanges such as Paymium, indodax, Coincheck, Coinmetro, and Delta Exchange are missing information about project teams, calendars, key events, and token data. It calls on project teams to submit a claim application on RootData to improve their transparency scores.It is reported that the RootData transparency score is used to measure the integrity and timeliness of a project, aiming to reflect the project's information disclosure status. The transparency score is divided into 5 levels from A to F, with lower scores indicating less complete information disclosure, requiring investors to exercise heightened caution.

Web3 asset data platform RootData published a daily transparency alert on Twitter (X), noting the absence of information such as teams, key calendar events, and token data for exchanges like Flipster, CoinEx, Reku, Bitvavo, and TruBit Latam. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects lacking core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of a project, aiming to reflect the project's information disclosure status. The transparency score is categorized into five levels from A to F, with lower scores indicating less complete information disclosure and higher risks of misconduct, requiring investors to exercise heightened caution.