2024

April

when

In a recent tweet on April 20, crypto investors were cautioned about an AI trading bot project on GitHub stealing their private keys.&nbsp; 
The alarming discovery was made by security researcher dm557 in X, who found the bot’s code has a hidden encrypted script that sends users’ private cryptocurrency wallet keys to its creator. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 下载和运行github上的web3项目要小心了，今天偶尔看到的一个开源项目发现是偷用户solana私钥的， <a href="https://t.co/ZEIng6o1v1" target="_blank" data-wpel-link="external">https://t.co/ZEIng6o1v1</a> 用base64/zlib 循环编码然后偷偷执行🤣🤣： hxxps://github.com/HELIPOX/solana-sniper-bot<a href="https://twitter.com/evilcos?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@evilcos</a> <a href="https://twitter.com/greysign1?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@greysign1</a>— dm (@dm557) <a href="https://twitter.com/dm557/status/1781671693746077923?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">April 20, 2024</a>
 </blockquote> 
 </div>
</figure> 
According to SlowMist, an entity that deals with blockchain security named Evilcos, the installed software contains backdoor code for secret key acquisition.&nbsp; 
“If you are not familiar with the code, you need to be alert when you see fancy codes (“garbled code”), because there may be something fishy hidden. Crypto is all about open source. If it is open source, it is eager to provide highly readable code. Who would bother with these fancy codes?” Evilcos remarked.,” said <a href="https://twitter.com/evilcos/status/1781857393259020349" target="_blank" rel="noopener" data-wpel-link="external">Evilcos</a> warning that any legitimate open-source crypto projects must ensure clarity and legibility of their codes. 
Despite reports that the bad backdoor has already been done away with, experts maintain extreme skepticism since they think that it can be just another deception aimed at getting new victims to download the compromised bot.&nbsp; 
“Avoid projects which have had a questionable past,” advised developer <a href="https://twitter.com/greysign1/status/1781879652560322941" target="_blank" rel="noopener" data-wpel-link="external">Greysign</a> cautioning that such an author might decide to return this malicious script. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/04/22/coinbase-board-member-kathryn-haun-announces-step-down/" data-wpel-link="internal">Coinbase Board Member, Kathryn Haun Announces Step Down</a> 
</blockquote>

Crypto-Stealing Open Source AI Bot Exposed

The Crypto Times

Other articles published on Apr 21, 2024

Ready To Fight Lands 1-2 Punch: Mike Tyson Joins as Ambassador, RTF Token Opens for Trading on th...

Ethereum ETF Unlikely in May, Claims Top Analyst

Memecoin Collector Becomes Largest Holder of Solana-Based Altcoin Before Bitcoin Halving: Lookonc...

A Look Into The Lido Onchain Activity And Its Simple DVT Module

How to Set Up a Bitcoin Node?

Exploring the Current Trends in Meme Token Market

Join our free newsletter for daily crypto updates!