The post Compromised Injective SDK sends wallet keys through fake telemetry appeared on BitcoinEthereumNews.com.
A malicious update to an Injective developer package has exposed private keys and seed phrases after being downloaded more than 300 times, Socket has found. Summary Socket found that a compromised Injective npm package copied private keys and seed phrases through fake telemetry. The malicious version was downloaded more than 300 times and spread through 17 related Injective Labs packages. CertiK reported that wallet compromises caused $444 million in losses during the first half of 2026. According to security firm Socket, version 1.20.21 of the @injectivelabs/sdk-ts npm package, which has about 50,000 weekly downloads, was altered after a developer’s GitHub account was compromised. Suspicious commits began on June 8, and the malicious release was later pinned across 17 other packages under the Injective Labs npm scope. The security firm said the code intercepted wallet key-g
A malicious update to an Injective developer package has exposed private keys and seed phrases after being downloaded more than 300 times, Socket has found. According to security firm Socket, version 1.20.21 of the @injectivelabs/sdk-ts npm package, which has about…
The incident highlights the critical need for enhanced security measures in software supply chains to protect sensitive crypto assets.
The post Hackers attempt to backdoor Injective npm package to steal wallet keys appeared first on Crypto Briefing.
The post Injective NPM Package Hacked to Steal Crypto Wallet Keys appeared on BitcoinEthereumNews.com.
Hackers compromised a widely used Injective software package in a supply chain attack with malware designed to steal crypto wallet private keys, adding to a growing attack vector involving attackers using legitimate platforms to deliver malicious payloads. Security firm Socket discovered on Thursday that a popular npm (node package manager) package with around 50,000 weekly downloads used for building on the Injective blockchain was maliciously modified to steal wallet private keys and seed phrases. The large number of downloads makes the incident “significant for developers and applications that handle Injective wallet workflows,” Socket researchers said. The malicious code has since been removed. The software supply chain attack is a relatively new attack vector in which hackers don’t target a blockchain’s cryptography or smart contracts directly, but instead compromise trusted deve
Windows 11 updates could soon include fixes for more security issues at once. Microsoft said in a blog post on Thursday that it's now using AI to "identify potential issues earlier," which means "customers will see a higher volume of security updates included in each security release."
Hackers, even amateurs, have increasingly been using AI to quickly exploit security weaknesses over the past several months. Security researchers are also using AI to find issues faster, leading to more frequent high-severity vulnerabilities, like the "Copy Fail" exploit that impacted nearly every Linux distribution in May. Similarly, when Anthropic announce …
Read the full story at The Verge.
The post Virginia Man Loses $9,888 After Hackers Access His Wells Fargo Account, Transfer Funds to China appeared on BitcoinEthereumNews.com.
Virginia Man Loses $9,888 After Hackers Access His Wells Fargo Account, Transfer Funds to China – The Daily Hodl
No Result View All Result Source: https://dailyhodl.com/2026/07/09/virginia-man-loses-9888-after-hackers-access-his-wells-fargo-account-transfer-funds-to-china
A Spotsylvania, Virginia, resident says hackers initiated an unauthorized wire transfer to steal nearly $10,000 from his retirement savings held at Wells Fargo. Jesse Combs, a longtime Wells Fargo customer, says he had never experienced a security issue with his account until May 29th, when he received an email notifying him that a $9,888 wire […]
The post Virginia Man Loses $9,888 After Hackers Access His Wells Fargo Account, Transfer Funds to China appeared first on The Daily Hodl.
The post Crypto Protocols Must Reaudit Old Smart Contracts, Experts Warn appeared on BitcoinEthereumNews.com.
Blockchain security experts are urging crypto protocols to reaudit their smart contracts as AI tooling is making it easier for hackers to identify vulnerabilities more quickly than ever before. “Our data argues for continuous review rather than a one-time audit,” TRM Labs head of policy Ari Redbord told Cointelegraph, adding that “attack techniques are moving faster than a single audit from launch day can account for.” “An audit built for last year’s attack patterns leaves a protocol exposed to this year’s as bad actors are changing up.” CertiK reported Monday that hackers stole another $1.32 billion in the first half of 2026 and have adopted increasingly sophisticated strategies in response to strengthened security measures across the industry. One of those strategies has been to revisit old codebases, CertiK said, adding that the attacker’s efforts have likely been “aided by
