2024

April

when

In a recent tweet on April 20, crypto investors were cautioned about an AI trading bot project on GitHub stealing their private keys.&nbsp; 
The alarming discovery was made by security researcher dm557 in X, who found the bot’s code has a hidden encrypted script that sends users’ private cryptocurrency wallet keys to its creator. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 下载和运行github上的web3项目要小心了，今天偶尔看到的一个开源项目发现是偷用户solana私钥的， <a href="https://t.co/ZEIng6o1v1" target="_blank" data-wpel-link="external">https://t.co/ZEIng6o1v1</a> 用base64/zlib 循环编码然后偷偷执行🤣🤣： hxxps://github.com/HELIPOX/solana-sniper-bot<a href="https://twitter.com/evilcos?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@evilcos</a> <a href="https://twitter.com/greysign1?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@greysign1</a>— dm (@dm557) <a href="https://twitter.com/dm557/status/1781671693746077923?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">April 20, 2024</a>
 </blockquote> 
 </div>
</figure> 
According to SlowMist, an entity that deals with blockchain security named Evilcos, the installed software contains backdoor code for secret key acquisition.&nbsp; 
“If you are not familiar with the code, you need to be alert when you see fancy codes (“garbled code”), because there may be something fishy hidden. Crypto is all about open source. If it is open source, it is eager to provide highly readable code. Who would bother with these fancy codes?” Evilcos remarked.,” said <a href="https://twitter.com/evilcos/status/1781857393259020349" target="_blank" rel="noopener" data-wpel-link="external">Evilcos</a> warning that any legitimate open-source crypto projects must ensure clarity and legibility of their codes. 
Despite reports that the bad backdoor has already been done away with, experts maintain extreme skepticism since they think that it can be just another deception aimed at getting new victims to download the compromised bot.&nbsp; 
“Avoid projects which have had a questionable past,” advised developer <a href="https://twitter.com/greysign1/status/1781879652560322941" target="_blank" rel="noopener" data-wpel-link="external">Greysign</a> cautioning that such an author might decide to return this malicious script. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/04/22/coinbase-board-member-kathryn-haun-announces-step-down/" data-wpel-link="internal">Coinbase Board Member, Kathryn Haun Announces Step Down</a> 
</blockquote>

Crypto-Stealing Open Source AI Bot Exposed

The Crypto Times

Other articles published on Apr 21, 2024

Buy signal for two strong cryptocurrencies this week

Halving Excitement in Bitcoin Has Ended: What to Expect in Price From Now On? Here is Analyst Opi...

DeeStream presale sparks interest among ICON & Cardano traders as Ether struggles

Weekly Round-Up #94 | Bringing you up to speed with the top stuff!

Has Cardano’s rally started? Exploring if ADA will reach $1 this time

Bitcoin BTC’s Post-Halving Era Begins: Dominance Stabilizes as Altcoins Rally

Join our free newsletter for daily crypto updates!