StonkBrokers

1 days agoNews Editor

StonkBrokers founder says official site was not compromised as Blockaid withdraws alert

StonkBrokers founder SimpleFarmer said on X that an earlier security alert claiming StonkBroker had been hit by a StepDrainer front-end attack was a false alarm. According to the post, the malicious domain referenced in the warning was not the project’s official website, and the official domain is StonkBrokers.io. SimpleFarmer also said Blockaid has removed StonkBroker from its list of affected sites and deleted the related warning post it had published earlier. The team, he added, has already taken the malicious domain offline. The statement addresses concerns raised by the earlier alert and clarifies that the official website itself was not the domain involved in the warning.

00

Policy Regulation

1 days agoNews Editor

WLFI adviser shares warning over suspected front-end attack on Kintsu and other sites

World Liberty adviser Ogle said on X that he had received an alert from security firm Blockaid, warning users not to visit the affected websites or connect their wallets for now. In the public notice cited by Ogle, Blockaid said it had detected an active front-end attack linked to the StepDrainer toolkit involving Kintsu, Flap, and StonkBrokers. According to the warning, malicious scripts were injected into the impacted sites, and users who clicked the "Connect Wallet" button could be redirected to a malicious page designed to steal assets. Blockaid said it is still investigating the incident and gathering more information, with additional updates to be released later.

20

Policy Regulation

1 days agoNews Editor

Ogle warns users off affected sites after Blockaid flags active front-end attack

World Liberty adviser Ogle said in a post on X that he had received an alert from security firm Blockaid, warning users not to visit the related websites or connect their wallets for the time being. According to the public warning, Blockaid detected an active front-end attack linked to the StepDrainer toolkit involving Kintsu, Flap, and StonkBrokers. The affected sites were injected with malicious scripts, and users who clicked "Connect Wallet" could be redirected to a malicious page designed to steal assets. Blockaid said it is still investigating the incident and gathering more information, with additional updates to be released later.

10

Polymarket

2 days agoNews Editor

Polymarket users report suspected front-end attack as trader Car says $800,000 was stolen

Polymarket trader Car said in a post on X that about $800,000 in assets was stolen from his Polymarket account and that all of his positions were sold. He also said a friend lost about $600,000 and urged users to lock their accounts and avoid interacting with the website for now. Separately, multiple users on X and in the Polymarket Discord community reported what they described as a suspected front-end compromise. According to those posts, assets were transferred out without authorization, one user said roughly $200,000 was stolen, and another said the official website prompted an unauthorized withdrawal signature request. As of publication, Polymarket had not issued a response. The incident follows a front-end phishing attack in June, when Polymarket said a third-party vendor had been compromised and about $2.94 million in user funds was stolen.

100

CoW Swap

4 months agoNews Editor 01

CoW Swap Front-End Hacked, Blockaid Flags cow.fi as Malicious, Users Urged to Revoke Approvals

Blockaid, a Web3 security firm, issued an emergency alert that CoW Swap's front-end site cow.fi has been compromised and marked as malicious. Users must stop interacting, revoke token approvals, and disconnect wallets. No official fix yet.

520

Polymarket

5 months agoNews Editor

Polymarket Users Lose ~$3.1M PUSD in Front-End Malicious Script Attack on Polygon

Blockchain intelligence firm AMLBot has detected a malicious script injection attack targeting Polymarket users on the Polygon network, resulting in the theft of approximately $3.1 million in PUSD stablecoins. Attackers embedded malicious code into the platform's front end, tricking users into signing EIP-7702 delegation transactions that emptied their wallets. The stolen funds were converted to USDC.e via Relay, bridged to Ethereum, swapped for ETH, and consolidated into approximately 1,891.9 ETH across three new wallets. AMLBot draws parallels to the 2024 attack on 1inch, where the Lottie Player library was compromised, leading to front-end contamination.

2580

Polymarket

5 months agoNews Editor

Polymarket Users Lose $3.1M in Front-End Script Attack; Technique Mirrors 2024 1inch Incident

According to AMLBot monitoring, Polymarket users on Polygon network suffered a front-end malicious script intrusion, losing approximately $3.1 million in PUSD. The attack exploited EIP-7702 delegate execution to trick users into signing malicious authorizations. Stolen funds were converted via Relay to USDC.e, bridged to Ethereum mainnet, and swapped to ETH, currently held as 1,891.9 ETH across three new wallets. The method closely resembles the 2024 1inch attack where the Lottie Player library was compromised to inject wallet-draining scripts, highlighting the persistent threat of third-party front-end dependencies in DeFi.

2400

Polymarket

5 months agoNews Editor

Polymarket Users Lose $3.1M in Front-End Script Injection Attack Exploiting EIP-7702 Delegation

Blockchain intelligence firm AMLBot has detected a front-end script injection attack on Polymarket users on Polygon, resulting in the theft of approximately $3.1 million in PUSD. The attacker injected malicious scripts into the frontend, tricking users into signing EIP-7702 delegate execution authorizations, which allowed the attacker to drain wallets. Stolen funds were converted via Relay to USDC.e, bridged to Ethereum, swapped for ETH, and concentrated into three new wallets holding roughly 1,891.9 ETH. AMLBot draws parallels to the 2024 1inch attack, where the Lottie Player library was compromised, highlighting the persistent risk of third-party script vulnerabilities leading to frontend contamination.

2420

Total 9 items

Go topage

Bit.Fan