Posts

Showing posts with the label hacks

Redditor's hacked Bitcoin is a lesson on the hidden dangers of paper wallets

Image
"My Bitcoin was taken. How?" A Reddit user thought they were following best practices until two days ago when their Bitcoin wallet was completely cleaned out. A Reddit user has become the latest example of why crypto users should be more careful when using wallet generators — after the user lost a few thousand dollars worth of Bitcoin (BTC) from their "secure" paper wallet. On July 24, a Redditor by the name /jdmcnair posted on the r/Bitcoin subreddit, asking for an explanation on how a hacker could have been able to steal over $3,000 worth of Bitcoin from their supposedly secure paper wallet — which was even generated on an offline computer. The Redditor's Bitcoin wallet address shows an outgoing transaction of 0.12 BTC. Source: Blockchain.com “I was doing self-custody, generated my key and printed it on paper on an offline computer, transferred my BTC to this offline wallet, and kept it stored in a safe that only I have the key for,” the user wrote. “I though...

Over $204M was lost in Q2 DeFi hacks and scams: Report

Image
More than $208.5 million was lost initially, but approximately $4.5 million was recovered, making the total amount of unrecovered funds over $204 million. Over $204 million was lost in decentralized finance (DeFi) hacks and scams in the second quarter of 2023, according to a June 27 report from Web3 portfolio app De.Fi. The report, titled “Q2 De.Fi Rekt Report,” was partially based on data from De.Fi’s “Rekt Database.” Over $208.5 million was initially lost during the quarter, but $4.5 million was recovered through prosecutions, deals with hackers and other recovery methods. Funds lost and recovered in Q2 2023. Source: De.Fi According to the report, the number of DeFi hacks in Q2 rose by “almost 7 times” year-over-year, with 117 incidents during the period compared with only 17 in the same quarter of 2022. A total of over $665 million was lost during the first half of 2023. The top five hacks of the second quarter were against Atomic Wallet, Fintoch, MEV-Boost, Bitrue and GDAC. Th...

Circle CSO's Twitter account breached by scammers

Image
"Any links to offers are scams. We are investigating the situation and taking action accordingly," wrote USDC issuer Circle. According to an official post on Mar. 22 from Circle, issuer of the USD Coin (USDC) stablecoin, the Twitter account for its chief strategy officer (CSO) and head of global policy Dante Disparte has been compromised. In a previously deleted Tweet, Disparte's account reportedly began promoting fake loyalty rewards to long-time users of USDC.  @ddisparte Twitter account was hacked. https://t.co/pItTHAG9Al — Jeremy Allaire (@jerallaire) March 22, 2023 Previously before the compromise, Disparte's account tweeted about the firm's regulatory developments and its participation in the ongoing Paris Blockchain Week. The security breach came less than a month after the stablecoin briefly depegged due to reserve deposits left in custody of defunct American tech bank Silicon Valley Bank. The incident has since been resolved and USDC has repegged...

MetaMask issues scam alert as NameCheap hacker sends unauthorized emails

Web hosting company NameCheap detected the misuse of one of its third-party services for sending some unauthorized emails — which directly targeted MetaMask users. Popular crypto wallet provider MetaMask warned investors against ongoing phishing attempts by scammers attempting to contact users through NameCheap’s third-party upstream system for emails. On the evening of Feb. 12, web hosting company NameCheap detected the misuse of one of its third-party services for sending some unauthorized emails — which directly targeted MetaMask users. Namecheap described the incident as an "email gateway issue." ️MetaMask does not collect KYC info and will never email you about your account! Do not enter your Secret Recovery Phrase on a website EVER. If you got an email today from MetaMask or Namecheap or anyone else like this, ignore it & do not click its links!https://t.co/EP0HGZFOfo pic.twitter.com/4CDtne24OK — MetaMask (@MetaMask) February 13, 2023 In the proactive alert, Me...

5 sneaky tricks crypto phishing scammers used last year: SlowMist

Image
SlowMist found that across 303 recorded blockchain security incidents in 2022, nearly a third were made up of phishing attacks, rug pulls and scams. Blockchain security firm SlowMist has highlighted five common phishing techniques crypto scammers used on victims in 2022, including malicious browser bookmarks, phony sales orders and trojan malware spread on messaging app Discord. It comes after the Security firm recorded a total of 303 Blockchain Security incidents in the year, with 31.6% of these incidents caused by phishing , rug pull or other scams, according to a Jan. 9 SlowMist Blockchain Security report. A pie chart of attack methods in 2022 in percentages Source: SlowMist Malicious browser bookmarks One of the phishing strategies makes use of bookmark managers, a feature in most modern browsers. SlowMist said scammers have been exploiting these to ultimately gain access to a project owner’s Discord account. "By inserting JavaScript code into bookmarks through these phishi...

Bitcoin mining pool BTC.com reports $3M cyberattack

Image
BTC.com, the seventh-largest Bitcoin mining pool, said that its client fund services are unaffected by the recent $3 million cyberattack. Major cryptocurrency mining pool BTC.com has suffered a cyberattack resulting in a significant loss of funds by the company and its customers. BTC.com experienced a cyberattack on Dec. 3, with attackers stealing around $700,000 in client assets and $2.3 million in the company’s assets, the mining pool’s parent firm BIT Mining Limited officially announced on Dec. 26. BIT Mining and BTC.com reported the cyberattack to law enforcement authorities in Shenzhen, China. The local authorities subsequently launched an investigation into the incident, starting collecting evidence and requesting assistance from relevant agencies in China. The local coordination has already helped BTC.com recover some of the assets internally, the announcement notes. “The company will devote considerable efforts to recover the stolen digital assets,” BIT Mining said, adding th...