Discord

According to reports, phishing URLs masquerading as legitimate social media posts have been used to steal cryptocurrency from user wallets on the CertiK social media account, a crypto auditing organization. 
With over 340,000 followers, CertiK’s X (formerly Twitter) account appears to have shared a fraudulent link and encouraged users to utilize it to protect themselves against a cyber crisis. 
<h2 id="strong-bad-guys-penetrate-certik-defenses-strong">Bad Guys Penetrate CertiK Defenses</h2> 
On their X page, CertiK included a phony Revoke Cash link that led visitors to a wallet drainer. Users were notified by the blockchain security firm of a vulnerability in the Uniswap Router contract that “was allowing attackers to shift anyone’s tokens if approved to the Uniswap contract” in a post that has since been removed. 
Revoke Cash’s official X account denied the claim, implying that CertiK’s X page had been hacked. 
Based on data from DeFillama, Uniswap is the biggest decentralized exchange trading platform on Ethereum, with a locked value of around $3.8 billion. The operations of Uniswap remained unaffected by the news. 
CertiK said it is currently investigating a breach of its social media account. 
<blockquote class="twitter-tweet"> 
 <a href="https://twitter.com/hashtag/CertiKSkynetAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#CertiKSkynetAlert</a> <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> 
 We are currently investigating a compromise of our X account <a href="https://twitter.com/CertiK?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@CertiK</a> 
 Do not interact with any posts until we have confirmed the account is secure 
 — CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1743202025771327740?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">January 5, 2024</a>
</blockquote> 
Users were also cautioned this morning not to interact with any postings from the main account until it is verified as secure by the company’s connected security alert account, which also stated that it is looking into the matter. 
<blockquote class="twitter-tweet"> 
 It looks like <a href="https://twitter.com/CertiK?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@CertiK</a>‘s X account has been compromised and is sharing a link to a fake Revoke website. Uniswap is NOT compromised. <a href="https://t.co/G5xw7PQR6n" rel="nofollow" target="_blank">pic.twitter.com/G5xw7PQR6n</a> 
 — Revoke.cash (@RevokeCash) <a href="https://twitter.com/RevokeCash/status/1743195962082775098?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">January 5, 2024</a>
</blockquote> 
Phishing schemes are most often conducted online. In order to get personal and financial information from victims of these scams, dishonest people frequently pose as reputable organizations, banks, or service providers and provide false information to them through phony websites, emails, or social media accounts. 
<img loading="lazy" decoding="async" class="aligncenter size-full" src="https://www.tradingview.com/x/L81EBadr/" width="2475" height="1163"> 
Phishing scammers typically send their victims emails or communications that seem to be from reputable sources. These communications request cash or personal information from the victims. By using phony websites that mimic authentic websites, they are able to obtain sensitive data such as credit card numbers, usernames, and passwords. 
<h2 id="strong-crypto-market-sentinel-falls-prey-to-hackers-strong">Crypto Market Sentinel Falls Prey To Hackers</h2> 
<a href="https://protos.com/x-account-of-crypto-auditing-firm-cetrik-hacked/" target="_blank" rel="noopener nofollow">Ironically,</a> CertiK had been marketing its 2023 hacker security report, which provides data and insights regarding web3 security, only two days earlier. Crypto reporter Wu Blockchain said there was a recent hack on the official CertiK Discord site, which resulted in the replacement of its legitimate Discord with a fake one that promoted phishing links. 
<blockquote class="twitter-tweet"> 
 The official Twitter account of security auditing company CertiK has been compromised and phishing links are being posted to defraud users of their wallet funds. Not long ago, the Discord on Certik’s official website was also replaced and turned into a fake Discord with phishing… <a href="https://t.co/tZYZthxvvc" rel="nofollow" target="_blank">pic.twitter.com/tZYZthxvvc</a> 
 — Wu Blockchain (@WuBlockchain) <a href="https://twitter.com/WuBlockchain/status/1743200688031908136?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">January 5, 2024</a>
</blockquote> 
According to their research, 751 security incidents in 2023 resulted in the loss of approximately $1.8 billion in digital assets. Although the sum is still enormous, it is 51% less than the $3.7 billion in losses from hackers and other incidents that occurred in 2022. 
<a href="https://www.republicworld.com/business/cryptocurrency/crypto-hack-losses-dip-by-51-in-2023-certik/" target="_blank" rel="noopener nofollow">CertiK’s analysis</a> also revealed that&nbsp;there were over&nbsp;$686 million in losses during the third quarter of 2023, making it a very vulnerable quarter. Interestingly, private key compromises emerged as the most expensive attack vector, with losses exceeding $880 million in 47 distinct instances this year. 
CertiK is a frontrunner among blockchain security companies. Major IT companies like Apple and Samsung have acknowledged the firm’s work, according to its website. 
Featured image from Freepik

Crypto Watchdog Bitten: CertiK Social Media Account Hacked In Ironic Twist

Table of Contents

Bitcoinist

Other articles published on Jan 5, 2024

The explosive growth of cryptocurrencies over the past decade

NFP Report Shows a Hot Labor Market with 216k Jobs Added in December

Shiba Inu: Shibarium To Burn 10 Trillion SHIB in January 2024?

Bitcoin Trembles: Between Hope and Fear Ahead of Tomorrow’s ETF Verdict

Terra Luna Classic (LUNC) And LUNA Face Strong Buying Pressure Amid Declining Open Interest

What’s Next? Big Crypto Predictions for 2024

Join our free newsletter for daily crypto updates!