alert

ChainCatcher thông báo, theo Cyvers Alert giám sát, phát hiện một sự kiện tấn công tiêm địa chỉ, dẫn đến thiệt hại khoảng 100.000 USD USDT cho nạn nhân. Kẻ tấn công đã thực hiện tiêm địa chỉ vào ví của nạn nhân khoảng 66 ngày trước, bằng cách gửi giao dịch tạo ra một địa chỉ độc hại tương tự như địa chỉ tương tác bình thường. Nạn nhân đã không kiểm tra đầy đủ địa chỉ ví, nhầm lẫn chuyển tiền vào địa chỉ của kẻ tấn công.Sau sự kiện, kẻ tấn công đã đổi USDT bị đánh cắp thành ETH để tránh rủi ro bị đóng băng tiềm ẩn, hiện đang nắm giữ khoảng 52.8 ETH trong ví. Cyvers nhắc nhở người dùng, khi thực hiện chuyển tiền trên chuỗi, nên luôn kiểm tra đầy đủ địa chỉ ví để tránh chỉ dựa vào các bản ghi địa chỉ trong lịch sử giao dịch.Đồng thời, các cơ quan an ninh khuyến nghị sử dụng công cụ an toàn trên chuỗi dựa trên AI để phát hiện hành vi giao dịch bất thường trong thời gian thực, nhằm giảm thiểu rủi ro tiêm địa chỉ, tấn công lừa đảo. Tấn công tiêm địa chỉ đã trở thành một trong những hình thức lừa đảo phổ biến trong lĩnh vực tài sản mã hóa trong những năm gần đây, kẻ tấn công thường lợi dụng thói quen của người dùng sao chép địa chỉ giao dịch lịch sử, thông qua việc giả mạo địa chỉ tương tự để dụ dỗ người dùng chuyển nhầm tài sản.

Tin tức từ ChainCatcher, theo dõi của Cyvers Alerts, Token of Power đã bị tấn công bởi hacker, thiệt hại khoảng 1,58 triệu USD. Một địa chỉ sử dụng nguồn vốn từ Tornado Cash đã thực hiện một giao dịch độc hại, chuyển tiền từ bể thanh khoản TOP/WETH của Balancer V1.Tài sản bị đánh cắp sau đó lại được chuyển vào Tornado Cash để xử lý trộn tiền.

The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged that the original content was suspected to be a segment of Morse code, with the core meaning being "transfer all DRB to Ilhamrfliansyh." Although the related account has been deactivated and the complete information cannot be fully confirmed, Grok directly published the "decoded result" as a reply after parsing, inadvertently @ing bankrbot, causing the content to be recognized by the system as an on-chain execution instruction.Subsequently, Bankr, as Grok's associated wallet, executed the request, transferring approximately $175,000 worth of DRB to the attacker's address. The attacker then quickly exchanged the DRB for USDC through multiple wallets.This incident temporarily triggered a nearly 40% drop in the price of DRB, but the market quickly recovered, and the price has largely regained its losses. Industry insiders pointed out that this event exposed the potential risks of the "AI + automated on-chain execution" system under prompt injection attacks, especially in scenarios where AI results can directly trigger fund operations.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), highlighting the lack of information such as team details, key calendar events, and token data for projects like Mars Protocol, Anvil, Lynex, AstridDAO, and Hatom Labs. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that RootData's transparency score is used to measure a project's integrity and timeliness, aiming to reflect the project's information disclosure status, urging project teams to immediately claim their projects. The transparency score is categorized from A to F, with a total of 5 levels from high to low; the lower the score, the more incomplete the project's information disclosure, and the higher the risk of wrongdoing, requiring investors to be highly vigilant.

According to the threat intelligence released by the SlowMist security team, its threat intelligence system MistEye has received community feedback regarding an active social engineering attack targeting cryptocurrency users.The attackers contact target users under the pretext of project collaboration, luring them to use a counterfeit "Harmony Voice" software (domain: harmony-voice[.]app) for so-called real-time translation, which is actually malware. SlowMist has synchronized the relevant threat intelligence (IOC) to its corporate clients.

According to the official announcement, Upbit has placed SPURS on the trading warning list.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting that information such as teams, key calendar events, and token data for projects like LeverUp, Flash.Trade, PRDT, f(x) Protocol, and Tectonic is missing. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure status of projects and urging project teams to immediately claim their projects. The transparency score is divided into five levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to exercise high caution.

According to disclosures from the GoPlus Chinese community, a user lost approximately $316,000 in USDC from their wallet due to signing a malicious Permit2 transaction, which was exploited by a phishing attacker.GoPlus advises users to adhere to the "four no" principles for phishing prevention: do not click on unfamiliar links, do not install unknown software, do not sign transactions with unclear content, and do not transfer funds to unverified addresses. They also recommend installing the GoPlus security plugin to intercept phishing risks in real-time.

The Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the absence of information such as team details, key calendar events, and token data for projects like Sentism.AI, Fortune, Ultima, Etherex, and Solomon Labs. It calls on project teams to submit/update information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure a project's integrity and timeliness, aiming to reflect the project's information disclosure status, urging project teams to immediately claim their projects. The transparency score is categorized into five levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of malfeasance, requiring investors to exercise heightened caution.

The Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology of China has monitored and found that attackers are using exploit tools targeting Apple Inc.'s terminal products to carry out cyber attack activities, which can lead to serious harms such as information theft and system control. The affected range includes Apple terminal products such as iPhone and iPad running iOS 13 to 17.2.1.Attackers induce users to use the Safari browser to visit web pages containing malicious code through methods such as SMS, email, or web poisoning, comprehensively utilizing security vulnerabilities present in the terminal devices to implant remote control Trojans into the victim's terminal products, stealing sensitive user information, gaining maximum privileges, and taking control.It is recommended that users of Apple terminal products conduct risk assessments, and promptly fix vulnerabilities through version upgrades and patch installations (refer to the Apple Security Updates). Pay attention to system update notifications and the latest security update announcements released by Apple, upgrade to the latest secure version in a timely manner, strengthen security awareness, avoid clicking on unknown links, and prevent the risk of cyber attacks.

The Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information regarding teams, key calendar events, token data, and other details for projects such as Fluid, SideShift.ai, Blackhole, Pharaoh, and Koi Finance. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of projects and urging project teams to immediately claim their projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of wrongdoing, requiring investors to be highly vigilant.

According to monitoring by Lookonchain, the Solana ecosystem DeFi protocol Drift Protocol has suffered a significant attack, with approximately $220 million to $270 million in assets suspiciously transferred to the address "HkGz4K." Subsequently, some of these assets were bridged to the Ethereum chain to purchase ETH, with a total of 19,913 ETH bought so far, valued at $42.6 million.The attacker also transferred some of the stolen SOL to Hyperliquid to exchange for ETH, as well as transferring some stolen SOL to Binance. Additionally, according to monitoring by onchainschool.pro, the details of the stolen assets are as follows: USDC valued at $103 million; SOL valued at $54 million; WBTC valued at $19 million; WETH valued at $12 million; cbBTC valued at $11 million; USDT valued at $6 million; USDS valued at $5 million; SYRUPUSDC valued at $3 million; JLP valued at $2 million.Drift Protocol's official statement indicated that they have noticed unusual activity and are currently investigating. Please do not deposit funds into Drift during the investigation period. This is not an April Fool's joke. Please act cautiously until further notice. Drift Protocol will release the latest news through official channels.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information on decentralized exchanges such as Hydration, Hyperbot, SideShift.ai, Lynex, and Beets regarding team details, key calendar events, token data, etc. It calls on project teams to submit/update information on RootData to enhance their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of the projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of misconduct, requiring investors to be highly vigilant.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information on teams, key calendar events, token data, and more for centralized exchanges such as Korbit, Bitkub, Luno, VALR, and bitFlyer. It calls on project parties to submit/update information on RootData to enhance their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of the projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to be highly vigilant.

The monitoring data from the China National Cybersecurity and Information Security Information Notification Center shows that there are currently over 200,000 active OpenClaw internet assets worldwide, with approximately 23,000 active OpenClaw internet assets within the country, exhibiting explosive growth, mainly concentrated in internet resource-intensive areas such as Beijing, Shanghai, Guangdong, Zhejiang, Sichuan, and Jiangsu.A large number of OpenClaw assets exposed to the internet pose significant security risks and are likely to become prime targets for cyberattacks. Among them, the behavior of the agents is uncontrollable, making management difficult. During the execution of commands, OpenClaw agents are prone to privilege escalation, leading to unauthorized task execution and disregard for user instructions, which may result in the deletion of user data, theft of user information, and takeover of user terminal devices, causing significant economic losses.

Web3 asset data platform RootData published a daily transparency alert on Twitter (X), noting the absence of information such as teams, key calendar events, and token data for exchanges like CEX.IO, BloFin Exchange, Phemex, Tokocrypto, and Coins.ph. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure status of the projects. The transparency score is divided into five levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to exercise heightened caution.

Web3 asset data platform RootData published a daily transparency alert on Twitter (X), stating that exchanges such as Bitunix, UEEx, Coinflare, ZKE Exchange, and KoinBX are missing information on project teams, calendars, key events, and token data. It calls on project parties to submit a claim application on RootData to improve their transparency scores.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure status of the projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating less complete information disclosure, requiring investors to exercise high caution.

The National Internet Emergency Center has issued a security risk alert for the OpenClaw application. Previously, due to improper installation and use of the OpenClaw agent, some serious security risks have emerged. It is recommended that relevant organizations and individual users take the following security measures when deploying and using OpenClaw:Strengthen network control by not exposing the default management port of OpenClaw directly to the public internet. Implement security management for access services through identity authentication, access control, and other security measures. Strictly isolate the operating environment and use technologies such as containers to limit the excessive permissions of OpenClaw;Enhance credential management by avoiding storing keys in plaintext in environment variables; establish a complete operational log audit mechanism;Strictly manage the sources of plugins, disable the automatic update feature, and only install signed extensions from trusted channels;Continuously monitor patches and security updates, and promptly perform version updates and install security patches.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), stating that exchanges such as Paymium, indodax, Coincheck, Coinmetro, and Delta Exchange are missing information about project teams, calendars, key events, and token data. It calls on project teams to submit a claim application on RootData to improve their transparency scores.It is reported that the RootData transparency score is used to measure the integrity and timeliness of a project, aiming to reflect the project's information disclosure status. The transparency score is divided into 5 levels from A to F, with lower scores indicating less complete information disclosure, requiring investors to exercise heightened caution.

Web3 asset data platform RootData published a daily transparency alert on Twitter (X), noting the absence of information such as teams, key calendar events, and token data for exchanges like Flipster, CoinEx, Reku, Bitvavo, and TruBit Latam. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects lacking core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of a project, aiming to reflect the project's information disclosure status. The transparency score is categorized into five levels from A to F, with lower scores indicating less complete information disclosure and higher risks of misconduct, requiring investors to exercise heightened caution.