#криптовалюты
-
Trezor warns of a suspected hardware implant in a wallet sold by reseller CryptoBilis
A customer in Indonesia found an extra circuit board with a cellular module inside a Trezor Safe 5 that, he says, sends out the recovery phrase. Trezor has not yet examined the device but is already urging all CryptoBilis buyers to move their funds to new wallets.
-
Binance Breached: $6.3 Billion in Assets Affected, Nearly $3 Billion Frozen
The world's largest crypto exchange has disclosed a security incident affecting roughly $6.3 billion in assets. Chainalysis calls it the biggest cryptocurrency theft on record.
-
Binance investigates possible hack involving up to $5.8 billion in crypto
Cryptocurrency exchange Binance is looking into reports of a potential security incident involving up to $5.8 billion in assets. If the theft is confirmed, it would be the largest in crypto history.
-
Keystone to Destroy 18,835 Hardware Wallets After Device Verification Key Is Stolen
An attacker broke into crypto wallet maker Keystone's website and obtained the key its devices use to prove they are genuine. Owners' recovery phrases and private keys were not affected, but the protection against counterfeits was compromised.
-
REVSTEALER leaves four modules behind — one disables Windows Update and Defender to make room for a miner
Elastic Security Labs has documented four previously unknown programs tied to a new Windows stealer, REVSTEALER. Unlike the stealer itself, they persist on the system — and one of the modules muzzles the defenses to launch a cryptominer.
-
Malicious Solidity Pro Extensions for VS Code Steal Developers’ Wallets and Keys
Researchers at Yeeth Security have uncovered Solidity Pro extensions that, posing as tools for Ethereum developers, steal crypto wallets, tokens and API keys. The malware activates on a delay to slip past marketplace review and antivirus scanners.
-
Weak Random Number Generator in CryptoJS Led to $5.7M in Crypto Wallet Thefts
The firm Coinspect has determined that the source of a string of crypto wallet thefts was the CryptoJS.lib.WordArray.random() function, which produced predictable seed phrases. Five applications were affected, and measured losses topped $5.7 million.
-
Codeberg Bans Cryptocurrency Projects
The community behind the nonprofit forge Codeberg has voted for an amendment to its rules that classifies cryptocurrency projects as content harmful to the platform's reputation. The decision sparked debate among users.
-
A Test Assignment with a Surprise: How a Recruiter Sent a Developer Malware in Git Hooks
An Indian developer received a tempting job offer paying $10–15K a month — and along with it, a test project laced with hidden malware. A breakdown of the attack revealed an entire multi-stage operation.