Key Highlights Polkadot has issued an urgent warning after malicious code discovered in versions of the Fearless Wallet browser extension led to unauthorized transfers of 17,286 $DOT across eight accounts. Blockchain security firm SlowMist revealed the exploit captured seed phrases and private keys via extension versions 3.0.1 and 3.0.3 through 3.0.5, using a remote switch ...
Key Highlights: Blockchain security firm SlowMist has issued a critical alert warning the global crypto industry of major vulnerabilities in widely used infrastructure. The security advisory specifically urges cryptocurrency exchanges, decentralized finance (DeFi) platforms, and wallet providers to take immediate precautionary action. Two serious security flaws have been identified, posing substantial operational and asset-security risks ...
Key Highlights: SlowMist, a leading blockchain cybersecurity firm, has issued a critical security alert warning crypto platforms about newly disclosed PHP vulnerabilities that enable remote code execution. PHP is widely used in backend development across cryptocurrency platforms, making the vulnerability disclosure especially significant for traders, developers, and organizations operating in the crypto sector. An October ...
Key Highlights: A logic flaw in MALT’s swap function allowed an attacker to siphon treasury funds by misclassifying protocol-funded DAI as user-deposited collateral. The breach joins a string of decentralized finance incidents, including a $3.8 million exploit on NEAR Intents and a $305,000 FlashLoopAdapter drain. Cumulative losses from DeFi exploits have surpassed $21 billion, according ...
Key Highlights: Goldpesatoken suffered an exploit resulting in an estimated loss of $114,900, according to blockchain security firm SlowMist (@SlowMist_Team). The vulnerability originated in the GPXHooks’ reBalance() function, which routed through a shared PositionManager that failed to validate currency deltas. Following the security breach, Goldpesatoken’s trading volume dropped to $0 as market participants halted activity ...
Key Highlights: Attackers from the Bitget security incident are moving stolen funds across chains using THORChain, according to SlowMist’s MistTrack platform. Bitget CEO Gracy Chen formally requested THORChain reject transactions from identified attacker addresses, arguing decentralization should not shield illicit fund flows. THORChain responded that its permissionless design mirrors Bitcoin and Ethereum, questioning how much ...
Key Highlights Blockchain security firm SlowMist, in collaboration with the OKX security team, discovered malicious code in FomoPeek versions 1.1 and 1.2 designed to steal private keys, seed phrases, and Keychain data from iOS devices. The malware includes an exploit framework targeting iOS kernel vulnerabilities across versions 12.0 through 18.7 and 26.0–26.1, capable of bypassing ...
A malware campaign disguised as downloadable model weights for Alibaba’s Qwen 3.8 27B AI model has targeted GitHub users who run open-source artificial intelligence models…