Chain Detective ZachXBT stated in the Telegram group that from February 19th to 20th, a new batch of more than 22 LastPass hackers caused losses of over 6.2 million US dollars to victims. The stolen funds on the EVM chain were quickly exchanged and bridged to Bitcoin. Last year, according to Chain Detective ZachXBT's monitoring, on Wednesday, October 25, 2023, alone, LastPass hackers caused more than 25 victims to be stolen about 4.4 million US dollars.
Welcome Back
Click “Sign in” to agree to Cointime’s Terms of Service and acknowledge that Cointime’s Privacy Policy applies to you.
Join CoinTime
Already have an account?
Click “page.Sign up” to agree to Cointime’s <a class="underline" href="#term-of-service">Terms of Service</a> and acknowledge that Cointime’s a class="underline" href="#privacy-policy">Privacy Policy</a> applies to you.
Sign in with email
Sign up with email
Your email
Check your inbox
Click the link we sent to to sign in.
Click the link we sent to to sign up.
ZachXBT: Over 22 users have lost more than $6.2 million due to LastPass hacking attacks in the past two days
-
Wechat scan to share
Recommended for you
-
CZ sentenced: A chronology of Binance’s legal battles in the US
Former Binance CEO Changpeng “CZ” Zhao was sentenced to four months in prison for violating U.S. money laundering laws.
-
Here’s what happened in crypto today
Need to know what happened in crypto today? Here is the latest news on daily trends and events impacting Bitcoin price, blockchain, DeFi, NFTs, Web3 and crypto regulation.
-
BONKKILLER is a Pixiu scam, and has withdrawn more than 3,000 SOL liquidity
SolanaFloor disclosed on X platform that Meme coin BONKKILLER on Solana chain is a honeypot scam, and after freezing the token sales of users, the project party has withdrawn liquidity of over 3000 SOL. -
SlowMist: The total loss from security incidents last week (April 22-April 28) exceeded US$2.15 million
According to the weekly security report (April 22-28, 2024) released by SlowMist, there were multiple security incidents this week. Although the overall losses were not severe, the total loss this week exceeded $2,155,127. The multiple security incidents include: -
Shenyu: Up to one billion users' cloud input methods may have leaked input content. Please take immediate measures to reduce the risk.
On April 29th, Cobo co-founder and CEO Shen Yu wrote on X platform that the cloud input method used by up to one billion users may have leaked input content. If you have entered mnemonic words or other sensitive information through any of the following cloud input methods, please take immediate measures to reduce the risk. -
SlowMist: Beware of watering hole attacks launched by malicious attackers using WordPress plugin vulnerabilities
SlowMist Security has issued a warning that attackers have recently been exploiting vulnerabilities in WordPress plugins to inject malicious JS code into normal websites and launch watering hole attacks. These attacks involve popping up malicious windows when users visit the site, deceiving them into executing malicious code or performing Web3 wallet signatures, thereby stealing their assets. It is recommended that sites using WordPress plugins check for vulnerabilities, update plugins in a timely manner, and avoid being attacked. When visiting any website, users should carefully identify the downloaded programs and Web3 signature content to avoid downloading malicious programs or having their assets stolen due to malicious signatures. -
Unverified Ember Sword NFT auction contract vulnerability has caused nearly $200,000 in losses
Certik has discovered a vulnerability in the unverified Ember Sword NFT auction contract, which has earned 60 WETH (approximately $195,000) from 159 victims who approved the contract. Certik reminds users to revoke their approval of the relevant contract on Polygon. -
zkSync ecological lending platform xBank Finance suspected of RUG
xBank Finance, a zkSync ecosystem lending platform, was suspected of being a RUG, and the protocol's TVL was close to zero. The project's official Twitter account has been frozen. -
Scammers use fake USDT balances to defraud cryptocurrency users
SlowMist has partnered with Imtoken to uncover a new cryptocurrency scam that uses offline transactions and USDT. Scammers manipulate the Ethereum RPC to falsify the USDT balance in the victim's wallet. The scammer lures the victim to change their Ethereum RPC URL to a URL controlled by them, making it appear that the victim has deposited USDT funds, but in reality, the victim is left empty-handed when attempting to trade. In addition, the scam also deceives users through small transfers to gain trust, then manipulates account balances and contract information, posing serious risks to unsuspecting users and is related to a wider range of pig slaughter scam activities. -
DeFi project BXH hacker transferred 9491 ETH via Tornado Cash 5 hours ago
The hacker who stole over $130 million in assets from the DeFi project BXH on October 30, 2021, transferred 9,491 ETH (worth $31.38 million) through Tornado Cash five hours ago, as monitored by blockchain analyst Yu Jin. The hacker collected a total of 9,491 ETH through three addresses and deposited all of these ETH into Tornado Cash through the 0xda9...ad3 address.
Daily Must-Read
-
US Court to hear proposed remedies from Terraform Labs, Do Kwon in May
-
Bitcoin’s ‘euphoria phase’ cools, but a BTC bottom could be near — Glassnode
-
BlackRock's BUIDL becomes the world’s largest tokenized treasury fund
-
USA to forge AI partnership with Nigeria for economic growth
-
Bitcoin halving 2024: 5 ways it’s different this time
-
The 2024 Bitcoin halving is the “most bullish” setup for BTC price
All Comments