Crypto M - Crypto News
2.43K subscribers
15.9K photos
194 links
Your #1 destination for the latest and most unbiased market news on Bitcoin, Ethereum, NFT, Fintech, Web3, DeFi, and Blockchain.
Download Telegram
πŸš€ HashDit Warns of Centralization Risks in AlphaBot Linked to Binance

The Web3 security firm HashDit has issued an alert regarding AlphaBot, a trending bot associated with the Binance Alpha Points system. The bot facilitates trading through the Binance Router to increase asset trade volume and balance, earning users more points. However, HashDit has identified a centralization risk due to the bot's reliance on swapRoleMap roles, which could pose a security threat if compromised.

The bot's key function, swapTo, uses TokenWithFee variables for fee calculations without limits, making it vulnerable to exploitation. Since this function can be invoked externally without fee restrictions, and allowances and activeTimeStampMap can be set indefinitely, there is a significant risk if the swapRoleMap is compromised or becomes malicious.

HashDit recommends users set reasonable allowance thresholds for any decentralized applications (DApps) and revoke them when no longer needed. Users are advised never to share their private keys with any tools and to validate tools through trusted platforms like CoinMarketCap. Additionally, testing new tools with a new wallet and limited funds is encouraged to ensure safety.


#HashDit #CentralizationRisks #AlphaBot #Binance #Web3 #Security #Trading #DApps #PrivateKeys #CyberSecurity #TokenWithFee #Exploitation #AllowanceThresholds
πŸš€ HashDit Warns of Compromised Fluence Project Account

The Web3 security firm HashDit stated on X, "The @fluence_project X account has been compromised. Please exercise caution and avoid clicking any links from this account for now." HashDit has urged @Safety and @X to assist in recovering the account and advised users to remain vigilant.

#HashDit #FluenceProject #Web3 #Security #AccountCompromise #Vigilance
πŸš€ HashDit Alerts Users on MCT Wallet DNS Domain Compromise

The Web3 security firm HashDit stated on X, β€œThe MCT wallet's DNS domain has been compromised since April 2024. Users are advised to transfer their balances to ensure security.”

#HashDit #MCTWallet #DNSCompromise #Web3Security #UserAlert #CyberSecurity
πŸš€ HashDit Warns of CoinMarketCap Website Compromise

The Web3 security firm HashDit stated on X, β€œWe have noticed reports indicating that the CoinMarketCap front-end website has been attacked and compromised. Please do not interact with the website at this time.” Users are advised to exercise caution and remain vigilant.

#HashDit #CoinMarketCap #Web3 #Security #CyberAttack #Caution #UserSafety
πŸš€ HashDit Warns Users of Compromised Cointelegraph Website

The Web3 security firm HashDit stated on X, "The front end website of Cointelegraph has been compromised to serve a drainer. Similar to what happened on CoinMarketCap 2 days ago. Please do not interact with the website now, until the site has been cleared." Users are advised to exercise caution and avoid engaging with the site until further notice.

#HashDit #Cointelegraph #Web3 #security #drainer #caution #cybersecurity
πŸš€ HashDit Warns of Compromised PANewsCN X Account

The Web3 security firm HashDit stated on X, β€œWe have noticed that the @PANewsCN X account has been compromised. Please do not interact or trust any of the links from the tweets right now, until it has been resolved.” Users are advised to remain cautious and avoid engaging with any content from the affected account until further notice.

#HashDit #PANewsCN #Web3 #security #compromise #caution
πŸš€ HashDit Warns of Fake Ads Leading to Malware

The Web3 security firm HashDit stated on X, "We have noticed that there are fake 'Ave ai' ads at the top of Google search results right now. The phishing redirects you to a fake AveaiGlobal website and prompts you to download an Info Stealer malware." Users are advised to remain vigilant and ensure they access the correct websites to avoid security threats.

#HashDit #FakeAds #Malware #Web3 #Phishing #SecurityThreats
πŸš€ Steps to Take if You Suspect a Scam or Hack

The Web3 security firm HashDit stated on X, β€œIf you suspect you have been scammed or hacked, remain calm and take immediate action.” They advise users to secure any remaining assets by moving or revoking them if necessary. If malware is suspected, disconnect from the internet and wipe the device clean.

HashDit suggests tracing the funds to see if they have been sent to a centralized exchange. If so, users should file a report with the exchange to freeze the funds and then report the incident to local law enforcement.

For further assistance, HashDit recommends reaching out to professional help, including organizations like @_SEAL_Org or @zeroshadow_io. They emphasize the importance of learning from the experience and advise users to be cautious of unsolicited contacts, avoid downloading unknown software, and thoroughly understand transactions before proceeding. They warn that investments promising unrealistic returns are likely scams.

HashDit concludes with a reminder to stay safe and vigilant.


#scam #hack #Web3 #security #HashDit #malware #cybersecurity #assets #funds #report #lawenforcement #professionalhelp #caution #investments #vigilance
πŸš€ HashDit Warns Users of Potential Email and Social Media Hacks

The Web3 security firm HashDit stated on X, β€œIf a hacker can't steal your TVL, they'll settle for all of your emails, messages, and socials instead.” The firm has assisted multiple users in addressing these security concerns, emphasizing the importance of safeguarding personal information against cyber threats.

#HashDit #Web3 #security #cyberthreats #emailhacks #socialmedia #personalinformation
πŸš€ HashDit Reports Address Poisoning Incident on Ethereum

The Web3 security firm HashDit stated on X, β€œAnother address poisoning victim on ETH has been identified.” The victim, associated with the address 0x1CD9398aF5a5555caC02b80B186b186B29748474, suffered a loss of $15,000. The intended address was 0x21769f9486ac400F61d62680902A10D8eC1fBb85, while the scammer's address was 0x21766c2d89cA97324d834E55b3c269f9aE75bb85. HashDit's Metamask Snaps product flagged a high risk when interacting with the scammer. Users are advised to exercise caution and utilize security tools to protect their assets.

#HashDit #Ethereum #Web3 #Security #AddressPoisoning #MetaMaskSnaps #CryptoSecurity #Scam #Scammer #HighRisk #CryptoAlerts #ETH
πŸš€ HashDit Reports Security Breach Affecting AIO Tokens

The Web3 security firm HashDit stated on X, β€œWe have detected that @olaxbt has been compromised, multiple $AIO tokens have been drained from the multisig wallets, sold onchain and sent to @kucoincom and @bitgetglobal for at least $2 million.”

#HashDit #SecurityBreach #AIO #AIOtokens #Multisig #Onchain #KuCoin #Bitget #Web3 #CryptoSecurity #CryptoNews #Hacked #BlockchainSecurity
πŸš€ HashDit Warns MCT Wallet Users of DNS Domain Hijacking

The Web3 security firm HashDit stated on X, β€œHumans are always the weakest link.” HashDit has advised MCT wallet users to transfer their balances due to a DNS domain hijacking incident involving the wallet's operator. Users are urged to take immediate action to secure their funds.

#HashDit #MCTWallet #DNSHijacking #DNSDomainHijacking #Web3Security #CryptoSecurity #WalletSecurity #SecurityAlert #CryptoNews
πŸš€ HashDit Alerts Users to Flagged Funder on Etherscan

The Web3 security firm HashDit stated on X, β€œClick into the new identical address and you will see the funder has been flagged by us on Etherscan.” This alert aims to inform users about potential security concerns related to flagged addresses on the blockchain platform.

#HashDit #Etherscan #Web3 #Blockchain #Security #Alerts #FlaggedAddresses #Funder
πŸš€ HashDit Alerts on Ongoing Supply Chain Attack via Compromised NPM Account

The Web3 security firm HashDit stated on X, β€œThere’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised.” The firm highlighted the severity of the situation, urging developers and users to remain vigilant and take necessary precautions to protect their systems from potential threats. This incident underscores the importance of security measures in safeguarding digital platforms and assets.

#HashDit #NPM #NPMAccount #SupplyChainAttack #SoftwareSupplyChain #Web3Security #CyberSecurity #SecurityAlert #ThreatIntelligence #DevSecOps
πŸš€ Hackers Exploit Microsoft Teams to Target Cryptocurrency Users

The Web3 security firm HashDit stated on X, β€œHackers are using Microsoft Teams to compromise users and steal their cryptocurrency. The attack is deceptively simple and relies on social engineering tactics.”

#MicrosoftTeams #Hacking #Hackers #SocialEngineering #Phishing #Cryptocurrency #Crypto #Web3 #Cybersecurity #HashDit
πŸš€ HashDit Alerts Users on Transaction Signing Clarity

The Web3 security firm HashDit stated on X, β€œEnsure clarity when signing transactions to avoid potential issues.”

#HashDit #Web3 #security #transaction #signing #clarity
πŸš€ HashDit Alerts on NPM Supply Chain Attack Involving Malicious Package

The Web3 security firm HashDit stated on X, β€œAnother NPM supply chain attack involving the package '@ctrl/tinycolor' has been identified, with malicious versions being distributed.” The package, which receives 2.2 million weekly downloads, has been compromised to execute unauthorized scripts. Users are advised to review their dependencies and ensure they are using secure versions to prevent potential security breaches.

#HashDit #NPM #SupplyChainAttack #MaliciousPackage #CtrlTinycolor #Web3Security #DependencyManagement #SecurityAlert
πŸš€ HashDit Addresses Concerns Over Relay Security

The Web3 security firm HashDit stated on X, β€œIn recent weeks, we’ve seen a big uptick of claims that 'Relay is hacked'. Obviously, this is something that we take very seriously.” The company emphasized its commitment to addressing these concerns and ensuring the security of its services. HashDit is actively investigating the claims and working to maintain the integrity of its platform.

#HashDit #RelaySecurity #Web3Security #BlockchainSecurity #CryptoSecurity
πŸš€ HashDit Alerts MCT Wallet Users on DNS Domain Hijack

The Web3 security firm HashDit stated on X, β€œMCT wallet users are advised to transfer their balances due to a DNS domain hijack affecting the operator.”

#HashDit #MCTWallet #DNSDomainHijack #Web3
πŸš€ HashDit Advises Users to Contact via Official Channels for Assistance

The Web3 security firm HashDit stated on X, β€œPlease reach out to us through our official email or telegram so we can assist further.”

#HashDit #X #Telegram #Email #Web3 #Security