Uniswap

CoinsPaid

Security

<p>The post <a href="https://coinpedia.org/news/from-coinspaid-breach-to-sec-twitter-scandal-a-week-in-crypto-hacking-jan-8th-jan-14th/">From CoinsPaid Breach to SEC Twitter Scandal: A Week in Crypto Hacking ( Jan 8th -Jan 14th)</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>It’s the new year, but the crypto heists continue. Same old, same old.&nbsp;</p> 
<p>This week’s narrative, in particular, has taken an unexpected turn. Departing from conventional methods, hackers redirected their focus towards social media, notably Twitter accounts of reputable entities. The consequence? Substantial losses running into the millions.&nbsp;</p> 
<p>Join us as we dissect the unfolding events in the crypto hacking domain, uncovering the unexpected nuances in the pursuit of illicit gains.</p> 
<h2 class="wp-block-heading" id="h-crypto-gateway-coinspaid-a-7-5m-breach"><strong>Crypto Gateway CoinsPaid: A $7.5M Breach</strong></h2> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">UPDATE<img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">After more investigation, our system has detected more unauthorized transactions on <a href="https://twitter.com/hashtag/BNB?src=hash&amp;ref_src=twsrc%5Etfw">#BNB</a> too involving <a href="https://twitter.com/coinspaid?ref_src=twsrc%5Etfw">@coinspaid</a> <br><br>Hacker has got another $1M worth of digital assets 924K BSC-USD and 268.5 <a href="https://twitter.com/search?q=%24BNB&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$BNB</a>.<br>All together total loss is $7.5M<br><br>Hacker's address:… <a href="https://t.co/877vBm0Uah">https://t.co/877vBm0Uah</a> <a href="https://t.co/xD6tg9QznK">pic.twitter.com/xD6tg9QznK</a></p>— 
   <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Cyvers Alerts 
   <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1743639524448587799?ref_src=twsrc%5Etfw">January 6, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Well-known crypto payment gateway CoinsPaid experienced its second security breach in six months. Multiple irregular transactions were detected on Jan. 6 allowing the withdrawal of $6.1 million worth of digital assets in Tether and CoinsPaid’s native token CPD.</p> 
<p>The platform had previously weathered a security breach in July 2023, where a staggering $37 million was pilfered. The modus operandi involved hackers employing a faux job interview, tricking an employee into downloading a malicious code. This breach granted unauthorized access to CoinsPaid’s infrastructure, exposing vulnerabilities in their security protocols.</p> 
<h2 class="wp-block-heading" id="h-sec-twitter-account-hack"><strong>SEC Twitter Account Hack </strong></h2> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">SEC's Twitter account hack causes <a href="https://twitter.com/hashtag/Bitcoin?src=hash&amp;ref_src=twsrc%5Etfw">#Bitcoin</a> to plunge from $47,000 to $45,920, sparking market concerns.<br><br>Mr. Huber accuses SEC of using the hack as an excuse to delay a <a href="https://twitter.com/hashtag/BitcoinETF?src=hash&amp;ref_src=twsrc%5Etfw">#BitcoinETF</a> decision. <a href="https://twitter.com/hashtag/CryptoNews?src=hash&amp;ref_src=twsrc%5Etfw">#CryptoNews</a> <a href="https://t.co/D7uRg5FE2l">https://t.co/D7uRg5FE2l</a></p>— Coinpedia (@CoinpediaNews) <a href="https://twitter.com/CoinpediaNews/status/1744999565261173170?ref_src=twsrc%5Etfw">January 10, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Bitcoin (BTC) experienced a tumultuous ride, witnessing $90 million in liquidations. The trigger? Fictitious tweets from a compromised SEC account announcing the approval of a bitcoin ETF. The tweet, live for a brief 30 minutes, led to erroneous reports from various news outlets and online personalities regarding the SEC’s endorsement of spot bitcoin ETFs. The unauthorized tweet has since been expunged, leaving repercussions in the crypto market.</p> 
<p><strong>So, Who’s to Blame?</strong></p> 
<p>The SlowMist Security Team issues a vital security alert in response to an upsurge in impersonators masquerading as journalists for phishing schemes. Utilizing broken Chinese in their communication, scammers deploy a seemingly innocuous Calendly link.&nbsp;</p> 
<p>Unbeknownst to victims, this link subtly transforms its name to “Calendly” upon clicking, facilitating scammers to compromise Twitter accounts and circulate phishing links through compromised tweets. Vigilance against unfamiliar links is crucial.</p> 
<p>Trending Topic These Days: <a href="https://coinpedia.org/beginners-guide/what-is-bitcoin-halving/" target="_blank" rel="noreferrer noopener">Bitcoin Halving 2024: Why It Matters &amp; What To Expect</a></p> 
<h2 class="wp-block-heading" id="h-mangofarm-on-the-radar"><strong>MangoFarm on the Radar</strong></h2> 
<p>Suspicions of a rug pull surrounded the MangoFarm project, with its official Twitter account now inaccessible and losses amounting to a significant $1,000,000.&nbsp;</p> 
<p>Meanwhile, Polychain Capital, a cryptocurrency venture capital firm, confirmed the compromise of its founder and CEO Olaf Carlson-Wee’s Twitter account. Hackers exploited this breach to disseminate phishing links containing false airdrops.</p> 
<p>The security firm CertiK also fell victim to an unexpected compromise. Attackers seized control of their Twitter account, disseminating false information about the vulnerability of Uniswap router contracts and phishing links to reentrancy attacks.</p> 
<p><strong>All in all…</strong></p> 
<p>As we wrap up this week’s crypto hack roundup, the targeted assault on Twitter accounts of high-profile figures underscores the ever-evolving strategies employed by hackers in the crypto sphere.</p> 
<p>Brace yourself for more insights into the dynamic world of crypto security, where each week unveils new challenges and unexpected twists. Stay tuned.</p>

From CoinsPaid Breach to SEC Twitter Scandal: A Week in Crypto Hacking ( Jan 8th -Jan 14th)

Table of Contents

CoinPedia News

Other articles published on Jan 13, 2024

Hong Kong lawmaker suggests action on ETFs as asset managers explore potential

South Korean Crypto Standoff: Country’s Regulator Issues Warning Against US Bitcoin Spot ETF Brok...

Bitcoin is bullish; Pullix, Cardano, and Solana positioned for gains

Crafting Liquid Gold: The New Narrative of RWA

The Ethereum Spot ETF: Another major turning point for the crypto market

The Next Meme Coins Set to Soar: Shiba Inu (SHIB), Dogecoin (DOGE), and Meme Moguls (MGLS)

Join our free newsletter for daily crypto updates!