Binance Square

cryptosecurity

8.8M නැරඹීම්
13,098 සාකච්ඡා කරමින්
White_Fang
·
--
🚨 CRYPTO SECURITY ALERT! 🐳 Hackers reportedly manipulated deposit addresses through a compromised Udesk chat widget, even tricking users’ clipboard pastes. 🔐 Stay Safe: ✅ Verify every wallet address. ✅ Send a small test deposit first. ✅ Use trusted platforms with strong security. ⚠️ The risk may come from compromised third-party scripts, not the blockchain itself. 💬 Are confidential chains safer than standard EVM networks? #CryptoSecurity #Blockchain #INIT #bitcoin
🚨 CRYPTO SECURITY ALERT! 🐳

Hackers reportedly manipulated deposit addresses through a compromised Udesk chat widget, even tricking users’ clipboard pastes.

🔐 Stay Safe:
✅ Verify every wallet address.
✅ Send a small test deposit first.
✅ Use trusted platforms with strong security.

⚠️ The risk may come from compromised third-party scripts, not the blockchain itself.

💬 Are confidential chains safer than standard EVM networks?

#CryptoSecurity #Blockchain #INIT #bitcoin
On Sunday we asked why a 2024 Keystone order was still on file when the company's own policy says buyer data gets erased after 180 days. Keystone has now answered, and the answer came with a bigger problem. The attacker who got into its website on Oct 20 also took the key Keystone uses to check that a device is genuine. That key is written into each wallet at the factory and can't be erased or rewritten. With it, someone could build a counterfeit that passes Keystone's own authenticity check. So the company is destroying 18,835 devices in its inventory, has paused website shipments and is moving sales to preorders with a new key. On the data side, Keystone's store held 51,083 buyer records. 25,119 had been deleted under the 180-day rule. The other 25,964, from 2024 to 2026, may have been taken: names, contact details, shipping addresses and order details. Keystone says its automated erasure tool failed and nobody caught it. Another 12,873 unpaid checkout records may also be exposed. Recovery phrases, private keys and payment details were not, per Keystone. What that means if you own one: a Keystone delivered before Oct 20 is fine if it passes the check. One delivered after Oct 20 needs a direct check with Keystone support, even if it passes. You don't need to move your $BTC because of this alone, the company says. Keystone also says it will never ask you to ship a device back, so any "recall" email, call or parcel is a scam. #CryptoSecurity #HardwareWallet NFA. DYOR.
On Sunday we asked why a 2024 Keystone order was still on file when the company's own policy says buyer data gets erased after 180 days. Keystone has now answered, and the answer came with a bigger problem.

The attacker who got into its website on Oct 20 also took the key Keystone uses to check that a device is genuine. That key is written into each wallet at the factory and can't be erased or rewritten. With it, someone could build a counterfeit that passes Keystone's own authenticity check. So the company is destroying 18,835 devices in its inventory, has paused website shipments and is moving sales to preorders with a new key.

On the data side, Keystone's store held 51,083 buyer records. 25,119 had been deleted under the 180-day rule. The other 25,964, from 2024 to 2026, may have been taken: names, contact details, shipping addresses and order details. Keystone says its automated erasure tool failed and nobody caught it. Another 12,873 unpaid checkout records may also be exposed. Recovery phrases, private keys and payment details were not, per Keystone.

What that means if you own one: a Keystone delivered before Oct 20 is fine if it passes the check. One delivered after Oct 20 needs a direct check with Keystone support, even if it passes. You don't need to move your $BTC because of this alone, the company says. Keystone also says it will never ask you to ship a device back, so any "recall" email, call or parcel is a scam.

#CryptoSecurity #HardwareWallet
NFA. DYOR.
·
--
බෙයාරිෂ්
Initia Pauses Network After Security Incident ⚠️ $INIT paused its network after a security vulnerability reportedly allowed an attacker to move about $2.7 million in assets. The team is working on a fix and investigating the incident. It’s a reminder to follow official updates and stay cautious during security events. Avoid unverified links or recovery claims. What matters most now is a secure fix and transparent updates. #Initia #INIT #CryptoSecurity #blockchain {future}(INITUSDT)
Initia Pauses Network After Security Incident ⚠️

$INIT paused its network after a security vulnerability reportedly allowed an attacker to move about $2.7 million in assets. The team is working on a fix and investigating the incident.

It’s a reminder to follow official updates and stay cautious during security events. Avoid unverified links or recovery claims.

What matters most now is a secure fix and transparent updates.

#Initia #INIT #CryptoSecurity #blockchain
We need to count words. Let's draft. Potential text: "Every time you connect a wallet to a DeFi protocol you expose its private keys to smart‑contract code you cannot fully audit. A single vulnerable contract or a malicious upgrade can drain the entire balance. Keeping your main holdings in a separate, offline wallet limits the blast radius — only the funds you intentionally move into a hot wallet are at risk. Three steps to protect yourself: 1. Create a dedicated hot wallet (hardware or reputable mobile app) used only for DeFi. Never store long‑term savings there. 2. Transfer only the amount you need for a specific interaction, then move any leftovers back to your cold storage immediately. 3. Regularly review and revoke token allowances with a tool like Revoke.cash; stale approvals are a common attack vector. Treat your DeFi wallet like a disposable cash envelope — load it, use it, empty it. Share this with someone new to crypto — it could save them! #Bitcoin #BTC #CryptoSecurity #StaySafe" Now count words. Let's count manually. "Every(1) time2 you3 connect4 a5 wallet6 to7 a8 DeFi9 protocol10 you11 expose12 its13 private14 keys15 to16 smart‑contract17 code18 you19 cannot20 fully
We need to count words. Let's draft.

Potential text:

"Every time you connect a wallet to a DeFi protocol you expose its private keys to smart‑contract code you cannot fully audit. A single vulnerable contract or a malicious upgrade can drain the entire balance. Keeping your main holdings in a separate, offline wallet limits the blast radius — only the funds you intentionally move into a hot wallet are at risk.

Three steps to protect yourself:
1. Create a dedicated hot wallet (hardware or reputable mobile app) used only for DeFi. Never store long‑term savings there.
2. Transfer only the amount you need for a specific interaction, then move any leftovers back to your cold storage immediately.
3. Regularly review and revoke token allowances with a tool like Revoke.cash; stale approvals are a common attack vector.

Treat your DeFi wallet like a disposable cash envelope — load it, use it, empty it. Share this with someone new to crypto — it could save them!
#Bitcoin #BTC #CryptoSecurity #StaySafe"

Now count words. Let's count manually.

"Every(1) time2 you3 connect4 a5 wallet6 to7 a8 DeFi9 protocol10 you11 expose12 its13 private14 keys15 to16 smart‑contract17 code18 you19 cannot20 fully
🔐 Security tip: the "support agent" who messages you first is not support. Real exchange support doesn't slide into your DMs on Telegram, X or WhatsApp asking you to "verify" your account. 3 red flags that it's a scam 👇 1️⃣ They contact you first and sound urgent ("your account will be frozen in 30 min") 2️⃣ They ask for your 2FA code, seed phrase or a screen share 3️⃣ They send a link that looks almost right (one letter off in the domain) What to do instead ✅ • Open the app yourself and use the official help center • Check any link or contact with Binance Verify before you trust it • Never share codes, keys or seed phrases with anyone. Ever. Your seed phrase is your money. Whoever has it, owns it. Have you ever received one of these messages? 👀 #CryptoSecurity #ScamAlert #Binance #crypto
🔐 Security tip: the "support agent" who messages you first is not support.

Real exchange support doesn't slide into your DMs on Telegram, X or WhatsApp asking you to "verify" your account.

3 red flags that it's a scam 👇
1️⃣ They contact you first and sound urgent ("your account will be frozen in 30 min")
2️⃣ They ask for your 2FA code, seed phrase or a screen share
3️⃣ They send a link that looks almost right (one letter off in the domain)

What to do instead ✅
• Open the app yourself and use the official help center
• Check any link or contact with Binance Verify before you trust it
• Never share codes, keys or seed phrases with anyone. Ever.

Your seed phrase is your money. Whoever has it, owns it.

Have you ever received one of these messages? 👀

#CryptoSecurity #ScamAlert #Binance #crypto
🚨 3 TANDA PENAWARAN KRIPTO YANG WAJIB DIWASPADAI! Pernah melihat proyek yang menjanjikan keuntungan tetap dan besar dalam waktu singkat? Sebelum mengirim uang atau menghubungkan wallet, periksa hal ini: ⚠️ 1. Janji profit pasti tanpa menjelaskan risiko yang masuk akal. ⚠️ 2. Tekanan untuk segera deposit dengan alasan kesempatan akan langsung berakhir. ⚠️ 3. Identitas dan informasi proyek yang tidak bisa diverifikasi melalui sumber independen. Jangan hanya percaya pada testimoni atau screenshot keuntungan. 🔐 Ingat: lindungi seed phrase, jangan pernah membagikan private key, dan periksa alamat situs secara teliti. Pernah menemukan tanda bahaya lain? Bagikan pengalamannya tanpa membocorkan data pribadi. #CryptoSecurity #SCAMalerts #Web3
🚨 3 TANDA PENAWARAN KRIPTO YANG WAJIB DIWASPADAI!

Pernah melihat proyek yang menjanjikan keuntungan tetap dan besar dalam waktu singkat?

Sebelum mengirim uang atau menghubungkan wallet, periksa hal ini:

⚠️ 1. Janji profit pasti tanpa menjelaskan risiko yang masuk akal.

⚠️ 2. Tekanan untuk segera deposit dengan alasan kesempatan akan langsung berakhir.

⚠️ 3. Identitas dan informasi proyek yang tidak bisa diverifikasi melalui sumber independen.

Jangan hanya percaya pada testimoni atau screenshot keuntungan.

🔐 Ingat: lindungi seed phrase, jangan pernah membagikan private key, dan periksa alamat situs secara teliti.

Pernah menemukan tanda bahaya lain? Bagikan pengalamannya tanpa membocorkan data pribadi.

#CryptoSecurity #SCAMalerts #Web3
·
--
බෙයාරිෂ්
🛡️ Rule #1 of Crypto: Protect Your Capital! In the $crypto world, security and risk management are far more important than chasing quick pumps. 💡 Quick Tips for Daily Traders: • Always enable 2FA on your accounts. • Never FOMO into a green candle without a plan. • Keep long-term holdings in a secure wallet. 💬 What is the biggest lesson you've learned in your crypto journey so far? Share your thoughts! 👇 #CryptoSecurity #TradingTips #BinanceSquare #HODL
🛡️ Rule #1 of Crypto: Protect Your Capital!
In the $crypto world, security and risk management are far more important than chasing quick pumps.
💡 Quick Tips for Daily Traders: • Always enable 2FA on your accounts. • Never FOMO into a green candle without a plan. • Keep long-term holdings in a secure wallet.
💬 What is the biggest lesson you've learned in your crypto journey so far? Share your thoughts! 👇
#CryptoSecurity #TradingTips #BinanceSquare #HODL
коли транзакція в біткоіні застрягає і довго не підтверджується, є функція прискорити її, і саме в цей момент якийсь шкідливий сервер міг підмінити адресу отримувача поясню простими словами як це працює, гаманець питає зовнішній сервер яку комісію поставити щоб прискорити платіж, і якщо цей сервер шкідливий, він міг повернути не просто цифру комісії а повністю підмінену транзакцію яка відправляє гроші зовсім не туди куди ти хотів це не хак блокчейна і не проблема самого біткоіна, це вразливість в тому як конкретні гаманці спілкувались з сторонніми серверами для однієї зручної функції, баг вже закривають розробники найважливіший висновок тут не технічний, а практичний, навіть база типу біткоіна яку всі вважають максимально безпечною може мати слабке місце в якомусь зручному додатковому сервісі навколо неї, сама мережа безпечна, але інтерфейс через який ти нею користуєшся теж частина безпеки я вважаю шо люди занадто рідко оновлюють гаманці вчасно і це головна причина чому такі баги взагалі встигають комусь нашкодити, скажи якщо в тебе інша думка $BTC #bitcoin #CryptoSecurity #WalletSecurity
коли транзакція в біткоіні застрягає і довго не підтверджується, є функція прискорити її, і саме в цей момент якийсь шкідливий сервер міг підмінити адресу отримувача

поясню простими словами як це працює, гаманець питає зовнішній сервер яку комісію поставити щоб прискорити платіж, і якщо цей сервер шкідливий, він міг повернути не просто цифру комісії а повністю підмінену транзакцію яка відправляє гроші зовсім не туди куди ти хотів

це не хак блокчейна і не проблема самого біткоіна, це вразливість в тому як конкретні гаманці спілкувались з сторонніми серверами для однієї зручної функції, баг вже закривають розробники

найважливіший висновок тут не технічний, а практичний, навіть база типу біткоіна яку всі вважають максимально безпечною може мати слабке місце в якомусь зручному додатковому сервісі навколо неї, сама мережа безпечна, але інтерфейс через який ти нею користуєшся теж частина безпеки

я вважаю шо люди занадто рідко оновлюють гаманці вчасно і це головна причина чому такі баги взагалі встигають комусь нашкодити, скажи якщо в тебе інша думка

$BTC #bitcoin #CryptoSecurity #WalletSecurity
Headline: Hot Wallet vs. Cold Storage: The Golden Rules of Crypto Self-Custody When entering Web3, how you store your assets is just as important as how you trade them. One of the most critical decisions every crypto participant faces is choosing between hot wallets and cold storage. Understanding the differences between the two is essential for protecting your capital. --- ### 🔥 1. Hot Wallets (Online & Convenient) A hot wallet is connected to the internet. This includes browser extensions, mobile apps, and exchange deposit addresses. • Best for: Daily trading, interaction with decentralized applications (dApps), and fast transfers. • The Advantage: Instant execution and seamless connectivity. • The Risk: Because they remain connected online, they are exposed to phishing links, malicious smart contracts, and device-level malware. --- ### 🧊 2. Cold Storage (Offline & Fortified) Cold storage keeps your private keys completely isolated from the internet, typically on a dedicated hardware device (e.g., a hardware key). • Best for: Long-term savings, treasury reserves, and capital you don't intend to trade daily. • The Advantage: Private keys never touch an internet-connected device, making remote malware or cyberattacks virtually impossible. • The Risk: Physical loss or improper seed phrase backup management. --- ### 💡 The Golden Rule: The 80/20 Custody Model A balanced framework used by experienced participants is to separate your portfolio: 1. Keep 80–90% of your long-term holdings offline in cold storage. 2. Keep only 10–20% (or whatever you are actively trading) in hot wallets for convenience. Never approve smart contract transactions on the same wallet where you keep your primary life savings. How do you split your portfolio custody between hot and cold storage? Share your thoughts below! Disclaimer: For educational purposes only. Never share your recovery seed phrase with anyone. #CryptoSecurity #SelfCustody #Web3 #BinanceSquare #Education #DYOR
Headline: Hot Wallet vs. Cold Storage: The Golden Rules of Crypto Self-Custody

When entering Web3, how you store your assets is just as important as how you trade them. One of the most critical decisions every crypto participant faces is choosing between hot wallets and cold storage.

Understanding the differences between the two is essential for protecting your capital.

---

### 🔥 1. Hot Wallets (Online & Convenient)
A hot wallet is connected to the internet. This includes browser extensions, mobile apps, and exchange deposit addresses.

• Best for: Daily trading, interaction with decentralized applications (dApps), and fast transfers.
• The Advantage: Instant execution and seamless connectivity.
• The Risk: Because they remain connected online, they are exposed to phishing links, malicious smart contracts, and device-level malware.

---

### 🧊 2. Cold Storage (Offline & Fortified)
Cold storage keeps your private keys completely isolated from the internet, typically on a dedicated hardware device (e.g., a hardware key).

• Best for: Long-term savings, treasury reserves, and capital you don't intend to trade daily.
• The Advantage: Private keys never touch an internet-connected device, making remote malware or cyberattacks virtually impossible.
• The Risk: Physical loss or improper seed phrase backup management.

---

### 💡 The Golden Rule: The 80/20 Custody Model

A balanced framework used by experienced participants is to separate your portfolio:
1. Keep 80–90% of your long-term holdings offline in cold storage.
2. Keep only 10–20% (or whatever you are actively trading) in hot wallets for convenience.

Never approve smart contract transactions on the same wallet where you keep your primary life savings.

How do you split your portfolio custody between hot and cold storage? Share your thoughts below!

Disclaimer: For educational purposes only. Never share your recovery seed phrase with anyone.

#CryptoSecurity #SelfCustody #Web3 #BinanceSquare #Education #DYOR
·
--
බෙයාරිෂ්
🚨 Ultimate Crypto Security & Scam Alert for Beginners! Staying safe and protecting yourself from scammers should be every crypto trader's top priority. Keep these golden rules in mind to secure your hard-earned funds with $BTC and $BNB {spot}(BNBUSDT) : 📌 Top 5 Safety Rules: • Never Share Private Keys or Seed Phrases: No official admin or support team will ever ask for your seed phrase. Anyone who asks is 100% a scammer! • Enable 2FA (Two-Factor Authentication): Always activate Google Authenticator or a passkey on your Binance account. It is much more secure than SMS verification. • Beware of Fake Links & Phishing: Never connect your wallet or click on unknown links. Always use the official Binance app or website. • Verify Before You Transfer: Always send a small test transaction before transferring funds to a new coin or network. • Ignore "Too Good to Be True" Offers: If someone promises double profits or guaranteed giveaways, recognize it as a trap immediately! 💡 Pro Tip: Security is your own responsibility. One small mistake can wipe out your entire portfolio! 💬 Have you enabled 2FA on your account yet? Let me know in the comments below! 👇 $BTC$BNB #CryptoSecurity #ScamAlert #BinanceSquare #CryptoSafety #ProtectYourFunds
🚨 Ultimate Crypto Security & Scam Alert for Beginners!
Staying safe and protecting yourself from scammers should be every crypto trader's top priority. Keep these golden rules in mind to secure your hard-earned funds with $BTC and $BNB
:
📌 Top 5 Safety Rules: • Never Share Private Keys or Seed Phrases: No official admin or support team will ever ask for your seed phrase. Anyone who asks is 100% a scammer! • Enable 2FA (Two-Factor Authentication): Always activate Google Authenticator or a passkey on your Binance account. It is much more secure than SMS verification. • Beware of Fake Links & Phishing: Never connect your wallet or click on unknown links. Always use the official Binance app or website. • Verify Before You Transfer: Always send a small test transaction before transferring funds to a new coin or network. • Ignore "Too Good to Be True" Offers: If someone promises double profits or guaranteed giveaways, recognize it as a trap immediately!
💡 Pro Tip: Security is your own responsibility. One small mistake can wipe out your entire portfolio!
💬 Have you enabled 2FA on your account yet? Let me know in the comments below! 👇
$BTC $BNB
#CryptoSecurity #ScamAlert #BinanceSquare #CryptoSafety #ProtectYourFunds
$ETH Fixes Critical Glamsterdam Bug Before It Could Put Staking Deposits at Risk 🚨 $ETH developers have patched a vulnerability in the upcoming Glamsterdam upgrade that could have redirected validator deposits to builders. No losses have been reported, and client teams must implement revised rules before the upgrade can progress toward mainnet launch. #Ethereum #ETH #CryptoNews #blockchain #CryptoSecurity {spot}(ETHUSDT)
$ETH Fixes Critical Glamsterdam Bug Before It Could Put Staking Deposits at Risk 🚨

$ETH developers have patched a vulnerability in the upcoming Glamsterdam upgrade that could have redirected validator deposits to builders. No losses have been reported, and client teams must implement revised rules before the upgrade can progress toward mainnet launch.

#Ethereum #ETH #CryptoNews #blockchain #CryptoSecurity
Ethereum Up or Down on October 27?

Ethereum Up or Down on October 27?

99%Up1%Down
පරිමාව $66,914.11
Solana搞了个大新闻!为了防止AI垃圾报告刷屏安全团队,现在提交bug报告必须烧掉1个SOL!一个月内收到809个报告,据说几乎全是AI生成的。开发团队也是被整无语了,只能出此下策。以后薅羊毛没那么容易咯! Solana's making researchers pay 1 SOL per bug report to combat AI spam! After getting flooded with 809 reports in a month, mostly AI-generated, they had to take action. No more free bug hunting! #CryptoSecurity $SOL
Solana搞了个大新闻!为了防止AI垃圾报告刷屏安全团队,现在提交bug报告必须烧掉1个SOL!一个月内收到809个报告,据说几乎全是AI生成的。开发团队也是被整无语了,只能出此下策。以后薅羊毛没那么容易咯!

Solana's making researchers pay 1 SOL per bug report to combat AI spam! After getting flooded with 809 reports in a month, mostly AI-generated, they had to take action. No more free bug hunting!

#CryptoSecurity $SOL
Keystone раскрыл масштаб взлома: похищен ключ верификации аппаратных кошельков. Это означает, что злоумышленники могли подделывать устройства, которые пользователи считали подлинными. Удар по доверию к холодному хранению ETH и других активов — в момент, когда рынок и без того под давлением. $BTC ETH #DriftHackVictimsBeginClaims #CryptoSecurity $LINK $XRP SOL
Keystone раскрыл масштаб взлома: похищен ключ верификации аппаратных кошельков. Это означает, что злоумышленники могли подделывать устройства, которые пользователи считали подлинными. Удар по доверию к холодному хранению ETH и других активов — в момент, когда рынок и без того под давлением.

$BTC ETH #DriftHackVictimsBeginClaims #CryptoSecurity $LINK $XRP SOL
🚨 SOL bug bounties now cost 1 SOL per report. AI spam overwhelmed security teams, forcing the permanent burn of 809 submissions in a single month. This move protects network integrity but signals extreme strain on Solana's developer infrastructure. Market Implication: Increased operational costs may dampen short-term developer sentiment, but strengthens long-term network resilience. Will this curb the AI influx or drive vulnerability research underground? #CryptoSecurity $SOL #TradingSignal #CryptoAnalysis
🚨 SOL bug bounties now cost 1 SOL per report. AI spam overwhelmed security teams, forcing the permanent burn of 809 submissions in a single month. This move protects network integrity but signals extreme strain on Solana's developer infrastructure.

Market Implication: Increased operational costs may dampen short-term developer sentiment, but strengthens long-term network resilience.

Will this curb the AI influx or drive vulnerability research underground? #CryptoSecurity

$SOL #TradingSignal #CryptoAnalysis
🚨 LEDGER FACES CLASS-ACTION LAWSUIT AS LEAKED DATA ENDANGERS $BTC HOLDINGS! 💣 Lawyer Ariel Givner just revealed that Ledger is hit with a class-action lawsuit in New York following undisclosed security failures. The complaint alleges a December 2023 breach leaked sensitive customer data, including emails and phone numbers, which quickly surfaced on dark web channels. 🔍 Malicious actors utilized this stolen metadata to launch surgical social engineering attacks, impersonating official representatives to drain self-custody wallets. 🌊 Securing your $BTC off exchanges is only half the battle when personal data vulnerabilities open backdoors for attackers. 🛡️ With phishing tactics becoming far more targeted, what steps are you taking to audit your personal operational security? 🤔 ⚠️ Not financial advice. Always manage your risk. 🛡️ 🏷️ #BTC #CryptoSecurity #HardwareWallet #SelfCustody 🚨 🛡️
🚨 LEDGER FACES CLASS-ACTION LAWSUIT AS LEAKED DATA ENDANGERS $BTC HOLDINGS! 💣

Lawyer Ariel Givner just revealed that Ledger is hit with a class-action lawsuit in New York following undisclosed security failures. The complaint alleges a December 2023 breach leaked sensitive customer data, including emails and phone numbers, which quickly surfaced on dark web channels. 🔍

Malicious actors utilized this stolen metadata to launch surgical social engineering attacks, impersonating official representatives to drain self-custody wallets. 🌊 Securing your $BTC off exchanges is only half the battle when personal data vulnerabilities open backdoors for attackers. 🛡️

With phishing tactics becoming far more targeted, what steps are you taking to audit your personal operational security? 🤔

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #BTC #CryptoSecurity #HardwareWallet #SelfCustody

🚨 🛡️
·
--
උසබ තත්ත්වය
🔐 The wallet was inactive — but its private key still worked On October 26, 48 wallets linked to Bloom Trading lost 9,408 SOL in just 94 seconds, according to Bitquery's on-chain investigation Five hadn't traded on Bloom since early 2025 Here's the part that matters 👇 $SOL {future}(SOLUSDT) Every drain was signed with the affected wallet's own key — no malicious token approval or smart contract exploit required ⚠️ The source of the key exposure is still unconfirmed But the security lesson is clear Stopping a bot doesn't make a previously shared private key safe again {spot}(SOLUSDT) 📌 If a trading bot has ever held your wallet's private key, moving remaining funds to a fresh wallet with a new key is safer than simply disconnecting the bot An inactive wallet isn't necessarily a secure wallet #solana #CryptoSecurity
🔐 The wallet was inactive — but its private key still worked

On October 26, 48 wallets linked to Bloom Trading lost 9,408 SOL in just 94 seconds, according to Bitquery's on-chain investigation
Five hadn't traded on Bloom since early 2025
Here's the part that matters 👇

$SOL

Every drain was signed with the affected wallet's own key — no malicious token approval or smart contract exploit required

⚠️ The source of the key exposure is still unconfirmed
But the security lesson is clear
Stopping a bot doesn't make a previously shared private key safe again


📌 If a trading bot has ever held your wallet's private key, moving remaining funds to a fresh wallet with a new key is safer than simply disconnecting the bot
An inactive wallet isn't necessarily a secure wallet

#solana #CryptoSecurity
印度CoinDCX退役钱包再被盗1600万美元USDT,CEO先称假警报 交易所的「退役钱包」再次成为攻击目标,这次是印度老牌平台CoinDCX。事件从一次被CEO公开定性为「假警报」的告警,最终坐实为约1600万美元USDT的实际损失,暴露出托管环节长期被忽视的风控隐患。 据Decrypt报道,这家总部位于孟买的交易所披露,约1599万枚USDT从其一笔已退役的冷钱包中被转走。这笔资产此前来自去年那起约4400万美元的黑客攻击,事件后本应进入长期封存、逐步处置的「退役」状态,如今却再度出现资金流失。 值得注意的是时间差:CEO曾对外称这是「假警报」,随后才证实损失真实发生。这种从否认到确认的转变,本身比损失金额更值得市场警惕——它意味着在风险初现时,信息披露与内部判断可能存在滞后或误判。 从资金面角度看,这次被盗资产几乎全部为USDT,与BTC、ETH等主流币的价格关联较弱,因此对整体市场流动性的直接冲击有限。这也决定了事件更偏向个案风险,而非系统性危机的信号。不过,稳定币恰恰是本轮资金面叙事的核心载体,一个主要交易所的USDT托管出现漏洞,难免与近期关于稳定币资金流向、储备可信度的讨论形成对冲。 市场可能的反应相对克制:由于损失以USDT计价且规模可控,短期内对大盘的传导有限,更多是情绪与信任层面的扰动。真正需要关注的是CoinDCX后续能否完整披露资金轨迹、是否启动补偿,以及同类退役资产的管理流程是否会被重新审视。 反方因素在于,单所交易所的安全事件通常不会蔓延至全行业,且USDT的脱钩风险主要取决于发行方储备,而非某个交易所的钱包安全。 接下来观察什么:若关注稳定币资金面叙事,交易层面更重要的是看此类事件是否动摇市场对USDT储备与托管的信任,而非短期价格波动。需要观察交易所后续披露的完整性,以及退役资产的管理流程是否会被重新审视。 #CoinDCX #USDT #CryptoSecurity 以上为信息整理与个人分析,不构成投资建议。 后续如有重要进展,我会继续跟踪更新。
印度CoinDCX退役钱包再被盗1600万美元USDT,CEO先称假警报

交易所的「退役钱包」再次成为攻击目标,这次是印度老牌平台CoinDCX。事件从一次被CEO公开定性为「假警报」的告警,最终坐实为约1600万美元USDT的实际损失,暴露出托管环节长期被忽视的风控隐患。

据Decrypt报道,这家总部位于孟买的交易所披露,约1599万枚USDT从其一笔已退役的冷钱包中被转走。这笔资产此前来自去年那起约4400万美元的黑客攻击,事件后本应进入长期封存、逐步处置的「退役」状态,如今却再度出现资金流失。

值得注意的是时间差:CEO曾对外称这是「假警报」,随后才证实损失真实发生。这种从否认到确认的转变,本身比损失金额更值得市场警惕——它意味着在风险初现时,信息披露与内部判断可能存在滞后或误判。

从资金面角度看,这次被盗资产几乎全部为USDT,与BTC、ETH等主流币的价格关联较弱,因此对整体市场流动性的直接冲击有限。这也决定了事件更偏向个案风险,而非系统性危机的信号。不过,稳定币恰恰是本轮资金面叙事的核心载体,一个主要交易所的USDT托管出现漏洞,难免与近期关于稳定币资金流向、储备可信度的讨论形成对冲。

市场可能的反应相对克制:由于损失以USDT计价且规模可控,短期内对大盘的传导有限,更多是情绪与信任层面的扰动。真正需要关注的是CoinDCX后续能否完整披露资金轨迹、是否启动补偿,以及同类退役资产的管理流程是否会被重新审视。

反方因素在于,单所交易所的安全事件通常不会蔓延至全行业,且USDT的脱钩风险主要取决于发行方储备,而非某个交易所的钱包安全。

接下来观察什么:若关注稳定币资金面叙事,交易层面更重要的是看此类事件是否动摇市场对USDT储备与托管的信任,而非短期价格波动。需要观察交易所后续披露的完整性,以及退役资产的管理流程是否会被重新审视。

#CoinDCX #USDT #CryptoSecurity

以上为信息整理与个人分析,不构成投资建议。
后续如有重要进展,我会继续跟踪更新。
තවත් අන්තර්ගතයන් ගවේෂණය කිරීමට ඇතුල් වන්න
Binance චතුරශ්‍රය හි ගෝලීය ක්‍රිප්ටෝ පරිශීලකයින් හා එක්වන්න
⚡️ ක්‍රිප්ටෝ පිළිබඳ නවතම සහ ප්‍රයෝජනවත් තොරතුරු ලබා ගන්න.
💬 ලොව විශාලතම ක්‍රිප්ටෝ හුවමාරුව මගින් විශ්වාස කෙරේ.
👍 සත්‍යායනය කරන ලද නිර්මාණකරුවන්ගෙන් සැබෑ විදසුන් සොයා ගන්න.
විද්‍යුත් තැපෑල / දුරකථන අංකය