securityalert

$BTC BALI KIDNAPPING FOR CRYPTO KEYS EXPOSES A GROWING PHYSICAL SECURITY RISK 🔥

Entry: Not available 🔥

In the last 30 hours, a Russian national was kidnapped in South Kuta and forced to surrender cryptocurrency account credentials under threat. The attackers also accessed his rental property to steal additional devices. This event underscores that digital asset security starts with personal safety — a factor many traders overlook when traveling or storing sensitive information.

How are you protecting your seed phrases and passwords offline?

Not financial advice. Always manage your risk.

#BTC #SecurityAlert #CryptoRisks #StaySafe

🔥

YOUR $BTC IS NOT SAFE FROM THIS LASER ATTACK ON TANGEM WALLETS 🔥

Ledger researchers just published findings that a laser attack can reset the password on any Tangem hardware wallet card. This requires physical access and about $250,000 worth of lab equipment — but here's the kicker: cards already in circulation cannot be patched.

If you're using a Tangem card right now, your seed phrase and funds are technically vulnerable if someone with the right tools gets their hands on your card. This is a hardware-level flaw that software updates can't fix.

How confident are you that your hardware wallet is truly secure?

Not financial advice. Always manage your risk.

#BTC #SecurityAlert #HardwareWallet #CryptoNews

⚡

HACKERS COMPROMISED THE OFFICIAL $INJ DEVELOPER KIT — 310 DOWNLOADS ⚠️

A backdoored version of Injective's SDK slipped in via a compromised GitHub account and stole wallet seed phrases and private keys during normal use. The payload went live for under an hour, spread across 18 npm packages, and was fetched 310 times before a fix landed.

If you or any project you interact with runs wallet software or bots built on Injective, that one-hour window could have leaked keys. The code quietly recorded secrets and shipped them to a server designed to look legitimate. Developers were told to treat any keys that touched those versions as compromised.

Are you checking which version your wallet or bot is running right now?

Not financial advice. Always manage your risk.

#INJ #SecurityAlert #SupplyChainAttack #CryptoWarning

⚡

🚨 APT Security Update

Two ethical hackers uncovered a critical vulnerability in Aptos' consensus mechanism that could have put billions in network value at risk. The exploit reportedly had a high success rate while costing only a few hundred dollars to execute.

✅ Thankfully, the issue was responsibly disclosed and patched before it could be abused.

This is a strong reminder that no Layer 1 is immune to security risks. If you're holding $APT , make sure your infrastructure and validators are running the latest security updates.

Stay informed. Stay secure. 🔒

#APT #Aptos #Crypto #Blockchain #SecurityAlert $APT

$INJ SDK COMPROMISED — 50,000 WEEKLY DOWNLOADS AFFECTED ⚠️

The @injectivelabs/sdk-ts npm package was maliciously modified after a developer's GitHub account was compromised. Version 1.20.21 contains code that steals wallet private keys and mnemonic phrases, encoding them to a disguised server.

With roughly 50,000 weekly downloads and 17 other packages in the same scope also locked, this is a broad supply chain attack. Suspicious commits started June 8th. Have you audited your dependencies?

Not financial advice. Always manage your risk.

#INJ #SupplyChainAttack #CryptoSecurity #SecurityAlert

⚠️

Hong Kong Tightens Crypto Security Standards

Hong Kong is raising the bar for crypto security. The Securities and Futures Commission (SFC) has ordered brokers and virtual asset trading platforms to replace traditional OTP logins with stronger authentication methods within the next 12 months. The move is designed to combat phishing attacks, strengthen investor protection, and reinforce confidence in Hong Kong's rapidly growing digital asset ecosystem.
#CryptoSecurityIncidents #SecurityAlert #MicronPostsRecord84.9%GrossMargin

$VANRY PHISHING INCIDENT DRAINS $1M - MARKET ON HIGH ALERT ⚡

A single phishing transaction on a top-tier exchange resulted in a $999,999 loss, reminding us how quickly liquidity can vanish when signatures are carelessly approved. This event is already pulling order books thin as traders reassess counterparty risk.

On the flip side, fear-driven dumps often create liquidity gaps that patient buyers exploit. The last similar incident saw the affected token recover 12% within 48 hours as accumulated bids absorbed the panic. Are you treating this as a buying opportunity or stepping aside?

Not financial advice. Always manage your risk.

#VANRY #SecurityAlert #PhishingScam #CryptoNews

⚡

تنبيه أمني على شبكة Hedera بعد رصد تحويلات مشبوهة تتجاوز 3.7 مليون دولار من جسر الشبكة إلى إيثيريوم.

​أشار حساب التحليل الشبكي "Specter" إلى وجود مؤشرات قوية على تعرض الشبكة لاختراق نشط، حيث رُصدت تدفقات خارجة ضخمة وغير معتادة عبر الجسور. هذا التطور أدى مباشرة إلى تراجع سعر $HBAR بنحو 3.15%، ليتداول حالياً عند مستويات 0.07017 دولار وسط حالة من الحذر بين المتداولين. ⚠️

​تكمن خطورة هذا النوع من الحوادث في ضرب الثقة ببروتوكولات الجسور، والتي تعتبر دائماً الحلقة الأضعف في أمن الشبكات. شخصياً، أرى أن الأيام القادمة ستكون حاسمة لفريق العمل لتقديم توضيحات تقنية وشفافة، فالسوق لا يرحم أي غياب للتواصل في أوقات الأزمات الأمنية. 📉

​كيف تقيم سرعة استجابة المشاريع لمثل هذه الاختراقات في حماية سيولة المستخدمين؟
$HBAR
$ETH

​#Hedera #HBAR #CryptoNews #SecurityAlert #BinanceSquare

30 MALICIOUS NPM PACKAGES TARGETING $ETH DEVELOPERS FOUND 🔥

A coordinated supply chain attack has been uncovered, using a fake trading bot repository and a DeFi-themed npm package to inject a JavaScript information stealer. The scope includes 30 malicious packages, with stake-math@3.5.4 pinned as a dependency in a repo that spawned roughly 2,300 nearly identical forks — a clear automation red flag.

Sensitive data in the line of fire: wallet libraries, private keys, mnemonics, API tokens, and stored browser credentials. If you’ve run npm install recently on any project connected to DeFi or trading bots, your environment may already be compromised. Are you auditing your dependencies today?

Not financial advice. Always manage your risk.

#ETH #SecurityAlert #DeFi #SupplyChainAttack

🔥

$ELINK BRIDGE ATTACK: TRANSFERS PAUSED, NO FUNDS LOST YET 🚨

Etherlink issued a security advisory after an attempted attack on its EVM bridge. All transfers have been paused as a precaution, with LayerZero and Asymmetric Research investigating. No user funds have been lost so far, but the service restoration timeline remains unclear as of June 28.

This incident reminds us that cross-chain infrastructure remains a prime target. The immediate pause shows responsible risk management, but frozen liquidity means uncertainty for holders. How do you assess bridge security in your own portfolio?

Not financial advice. Always manage your risk.

#ELINK #SecurityAlert #BridgeSafety #CryptoNews

⚡

$H FACES A BRUTAL SELLOFF AFTER A MASSIVE PRIVATE KEY COMPROMISE ⚠️

The market is reacting sharply to the $30 million exploit involving the Humanity Foundation. With the price dropping 85% in a few hours and the FDV crashing from $7 billion to $1.2 billion, liquidity is currently extremely volatile.

The team has requested a halt to bridge and liquidity pool activity, which creates significant uncertainty for current holders. Markets hate this kind of technical failure, and the recovery path remains unclear until the foundation stabilizes the situation. Are you holding through the volatility or moving to the sidelines?

Not financial advice. Always manage your risk.

#H #CryptoNews #MarketUpdate #SecurityAlert

⚡

$TAIKO SECURITY ALERT AS ON-CHAIN ACTIVITY SUGGESTS A BREACH ⚠️

There is currently an active exploit involving $TAIKO with approximately 2 million USD drained from the protocol. The attacker has already moved over 200,000 USD to various exchanges, signaling that the funds are being offloaded.

I suggest staying away from any interactions with the protocol until the team provides a verified update. It is better to sit on your hands and protect your capital than to risk exposure while the situation is still unfolding. Have you checked your wallet permissions or revoked any recent approvals for this project?

Not financial advice. Always manage your risk.

#TAIKO #SecurityAlert #CryptoTrading #RiskManagement

⚡

$GNO TEAM ACCOUNT COMPROMISED — STAY SAFE OUT THERE ⚠️

Gnosis's official X account has been hacked according to PeckShield monitoring. Do not interact with any posts or links from that account until further notice.

These takeovers usually lead to phishing threads and fake token giveaways. Even if the account looks legit, consider it compromised until confirmed otherwise. One wrong click can drain your wallet.

Are you checking the source before you click any "official" links?

Not financial advice. Always manage your risk.

#GNO #SecurityAlert #Phishing #CryptoScam

⚡

$ADA UNDER PRESSURE AFTER SECONDFI EXPLOIT — TRUST TAKES HITS 🔥

Security incidents shake sentiment faster than any price candle. This kind of FUD often drives a liquidity sweep below recent support before buyers step back in. Watch for a wick into the old demand zone — that's where structure typically holds.

Are you cutting exposure or waiting for the flush to buy?

Not financial advice. Always manage your risk.

#ADA #SecurityAlert #MarketUpdate #Crypto

⚡

⚠️ Polymarket's frontend was compromised by a malicious script injection.

The decentralized prediction market confirmed attackers successfully injected malicious code into its platform's frontend interface.

Polymarket has since removed the affected dependency to contain the breach.

Users who interacted with the platform during the compromise window should remain vigilant for suspicious wallet prompts or unexpected transaction requests.

#CryptoNews #MarketUpdate #SecurityAlert

BLUENOROFF HIJACKS ZOOM CALLS TO DRAIN CRYPTO WALLETS — $BTC EXPOSED 🚨

Fake Zoom meetings. AI deepfakes. A fileless hijack in under five minutes. This is the new face of crypto security threats. A North Korean Lazarus crew just burned through 66 days inside a Web3 company and compromised over 100 executives across 20 countries.

Every stolen face gets recycled to bait the next target. The attack surface is wider than most traders realize — and it only takes one bad click. Are you securing your wallet access better than your inbox?

Not financial advice. Always manage your risk.

#BTC #SecurityAlert #Web3 #CryptoScam

🎯

$TORN DAO UNDER ATTACK - $23M TREASURY AT RISK 🚨

Body
A suspicious governance proposal landed on Tornado Cash DAO about 8 hours ago. The contract code is unverified — extremely rare for this DAO — and the proposer’s address was funded via Railgun just four days ago. If passed, the target contract uses delegatecall to grant the attacker near-total control of the treasury.

This mirrors the 2022 exploit that handed the protocol to an attacker. TORN token holders have a narrow window to vote down this proposal before it executes. Are you monitoring your voting power right now?

Not financial advice. Always manage your risk.

#TORN #SecurityAlert #GovernanceAttack #DAO

⚠️

$ADA SECURITY BREACH: 16M STOLEN FROM 374 ADDRESSES 🚨

SecondFi confirmed the root cause of the exploit is at the address level. Restoring affected wallets to another Cardano wallet triggers risk when transactions are signed. 16 million ADA was drained in just three transactions by an external attacker.

129 million ADA has been moved to an independent third party custodian for verification and return. This reinforces the trust assumption risk in DeFi—user action on unofficial instructions amplified the damage. Even secure ecosystems have surface-level vulnerabilities.

Have you ever restored a wallet to another platform without verifying the source?

Not financial advice. Always manage your risk.

#ADA #SecurityAlert #DeFiRisk #Cardano

⚠️

$2.94M PHISHED FROM POLYMARKET USERS – FUNDS MOVED TO $ETH 🔥

Attackers have compromised 11+ wallets holding PUSD, converting stolen assets to ETH and consolidating into a single address. This represents a concentrated liquidity drain that could pressure ETH spot markets if the hacker begins distributing.

Phishing vectors like this often precede larger market structure shifts — liquidity removal from DeFi protocols tightens order book depth. The attacker's ETH position is now worth tracking for any on-chain movement.

Are you reviewing your token approvals today?

Not financial advice. Always manage your risk.

#ETH #SecurityAlert #Phishing #DeFiRisk

🔥

$GNO SECURITY BREACH — OFFICIAL X ACCOUNT COMPROMISED ⚠️

Body:
PeckShield has confirmed that Gnosis’s official X account was hijacked earlier today. Community members are advised to avoid all engagement — no links, no DMs, no retweets. This is the second major project account compromise this week.

Attackers typically use compromised accounts to post fake token contracts or phishing links. Verify all official communications through Gnosis’s website or Discord alone. What steps are you taking to verify project announcements before interacting?

Not financial advice. Always manage your risk.

#GNO #SecurityAlert #CryptoHack #PhishingAlert

⚠️