Hackers | Crypto

AFX, a decentralized perpetual exchange operating on Arbitrum, reportedly lost $24.15 million on Wednesday, while the Verus Ethereum bridge was attacked hours later. Hackers stole more than $31.6 million across two unrelated crypto bridge exploits spaced just hours apart, targeting bridges operated by decentralized perpetual exchange AFX and Verus Protocol.  According to Blockaid, AFX, a decentralized perpetual exchange operating on Arbitrum, reportedly lost $24.15 million on Wednesday through a hack targeting one of its crosschain bridges. Hours later, Blockaid said it detected an exploit targeting the Verus Ethereum Bridge that resulted in about $7.5 million in crypto being stolen.  The back-to-back exploits highlight the continued security risks facing crosschain bridges, which hold large pools of assets and move funds between separate blockchains.  Read more

The incident is significant for developers and applications that handle Injective wallet workflows, Socket researchers said. Hackers compromised a widely used Injective software package in a supply chain attack with malware designed to steal crypto wallet private keys, adding to a growing attack vector involving attackers using legitimate platforms to deliver malicious payloads. Security firm Socket discovered on Thursday that a popular npm (node package manager) package with around 50,000 weekly downloads used for building on the Injective blockchain was maliciously modified to steal wallet private keys and seed phrases. The large number of downloads makes the incident “significant for developers and applications that handle Injective wallet workflows,” Socket researchers said. The malicious code has since been removed. Read more

EasyDNS CEO Mark Jeftovic said the social engineering attack was highly sophisticated and the company is conducting further investigation to determine how the breach occurred. Ethereum Name Service gateway eth.limo has revealed that the domain hijacking on Friday was caused by a social engineering attack directed against EasyDNS, its domain name service provider.  According to a postmortem published by eth.limo on Saturday, an attacker impersonated one of its team members to initiate an account recovery process with easyDNS, granting access to the eth.limo account and allowing them to alter domain settings. “The NS records were changed and directed to Cloudflare… Once we understood that a DNS hijack had taken place, we immediately notified the community as well as Vitalik Buterin and others. We then began contacting EasyDNS in an attempt to respond to the incident,” the company said. Read more

A poisoned release of LiteLLM turned a routine Python install into a crypto-aware secret stealer that searched for wallets, Solana validator material, and cloud credentials every time Python started. On Mar. 24, between 10:39 UTC and 16:00 UTC, an attacker who had gained access to a maintainer account published two malicious versions of LiteLLM to […] The post Hackers sneak crypto wallet-stealing code into a popular AI tool that runs every time appeared first on CryptoSlate.

1inch has expanded its security strategy through a collaboration with Innerworks, combining AI analysis with continuous ethical hacking to build adaptive defenses. The partnership advances DeFi safety by anticipating and neutralizing attacks before they impact users. The post 1inch and Innerworks Flip the Script on Hackers: Deploying AI-Powered Immune Layer appeared first on Cryptonews.

CZ has received a Google alert on a state-linked hack attempt. Investigations have tied fresh Lazarus activity to fake IT hires, credential-stealing malware, traced laundering via Tornado Cash, and prior breaches as U.S. actions against DPRK-linked networks have been reported. The post CZ Targeted by ‘Government-Backed’ Hackers – Is North Korea’s Lazarus Group Behind It? appeared first on Cryptonews.

Nemo Protocol, a decentralized finance yield platform operating on the Sui blockchain, fell victim to a cyberattack that resulted in $2.4 million in losses just ahead of its scheduled maintenance window, causing total value locked to crash 75% from over $6.3 million to $1.57 million as users fled the platform amid the third major DeFi hack this month. The post Nemo Protocol Loses $2.4M to Hackers on Sui Blockchain Before Planned Maintenance appeared first on Cryptonews.

Hackers siphoned about R$800 million ($140 million) from six reserve accounts connected to Brazil’s central bank after breaching São Paulo-based software vendor C&M Software on June 30, according to blockchain investigator ZachXBT and reports from local news outlets. Police said C&M employee João Nazareno Roque sold his corporate login for R$15,000 ($2,770) and later developed […] The post Hackers steal $140M from Brazilian central bank reserve accounts via partner breach appeared first on CryptoSlate.