# attack İlgili Makaleler

HTX Haber Merkezi, kripto endüstrisindeki piyasa trendleri, proje güncellemeleri, teknoloji gelişmeleri ve düzenleyici politikaları kapsayan "attack" hakkında en son makaleleri ve derinlemesine analizleri sunmaktadır.

A Serious Threat is Looming for Bitcoin (BTC) and Cryptocurrencies: They Could Be the First Target!

The rapid advancement of quantum computing poses a serious threat not only to cryptocurrencies but to the entire encryption system, including banking. However, experts warn that the cryptocurrency market might be the first sector to suffer from this transformation. As predictions of a 'Q-Day' approach, the slow governance processes of cryptocurrencies, rather than their cryptography, could become the biggest obstacle to defending against quantum attacks. Quantum Xchange CEO Eddy Zervigon has compared cryptocurrencies to "canaries in the coal mine," stating that the first successful quantum-powered cyberattack is likely to target decentralized blockchain networks. While a cryptographically relevant quantum computer capable of breaking the elliptic curve cryptography underlying Bitcoin's signatures and banking security does not yet exist, work by giants like Microsoft, IBM, and Google suggests the threat is nearer than previously thought. The industry consensus estimates such a computer could emerge around 2029. Supporting this view, recent Google research indicates the number of physical qubits needed to break the cryptographic systems protecting Bitcoin and Ethereum has decreased by about 20 times compared to prior estimates, highlighting the accelerated danger. Zervigon concludes that Bitcoin's greatest risk lies not in its current cryptographic system, but in the slow pace of implementing major network upgrades.

cryptonews.ru2 gün önce 14:06

A Serious Threat is Looming for Bitcoin (BTC) and Cryptocurrencies: They Could Be the First Target!

cryptonews.ru2 gün önce 14:06

BonkDAO Treasury Drain Shows Solana Governance Risk Is Real

The BonkDAO treasury suffered an approximately $20 million drain due to a malicious governance proposal passed through the Realms platform on Solana. This incident highlights governance as a critical attack surface for DAOs, distinct from smart contract exploits. The attack leveraged the DAO's own voting mechanics to move funds, demonstrating that flawed governance design—such as weak proposal rules or voter weight calculations—can be exploited even when the underlying blockchain functions correctly. The event serves as a warning for Solana DAOs to rigorously review and strengthen their governance safeguards, including quorum thresholds, timelocks, and execution permissions. While damaging to community trust, especially for the prominent BONK meme ecosystem, the issue is not a failure of the Solana base layer but a widespread application-level risk common across blockchain ecosystems.

bitcoinist07/21 22:31

BonkDAO Treasury Drain Shows Solana Governance Risk Is Real

bitcoinist07/21 22:31

3 crypto attacks in 24 hours – From fake apps to a $14.2M SOL theft

The cryptocurrency space witnessed a high volume of attacks within 24 hours, highlighting several major security threats. First, fraudsters targeted SecondFi by creating fake browser extensions and apps to steal crypto; the company clarified its official channels and warned against unsolicited links. In a separate incident, a compromised early Solana whale wallet led to the theft of 180,900 SOL (worth $14.2 million), with the stolen funds being bridged to Ethereum and laundered via Tornado Cash. Finally, the jscrambler npm package suffered a supply chain attack where stolen credentials were used to publish malicious versions containing an information-stealing payload. These events underscore the prevalence of phishing, wallet exploits, and software supply chain vulnerabilities, emphasizing the need for vigilance, verifying official sources, and prompt software updates.

ambcrypto07/12 19:03

3 crypto attacks in 24 hours – From fake apps to a $14.2M SOL theft

ambcrypto07/12 19:03

Cardano wallet exploit: SecondFi traces attack to private key flaw, warns users not to restore seed phrases

SecondFi has identified the root cause of the recent Cardano wallet exploit, which drained approximately 16 million ADA ($2.4 million) from 374 wallets. The attack stemmed from a deterministic nonce derivation flaw in its software signer, allowing attackers to mathematically reconstruct private keys from public blockchain data after transactions were signed. The company warns affected users not to restore their compromised recovery phrases into another wallet, as the vulnerability exists at the private key level, meaning addresses remain exposed. Users are advised against moving funds or withdrawing staking rewards and should instead await SecondFi's official recovery process. Emergency containment has secured around 129 million ADA pending recovery. SecondFi has launched a restoration fund, engaged external security auditors, and identified two attacker groups responsible for the automated draining campaigns between June 21 and 23. The platform remains in maintenance mode during ongoing security reviews.

ambcrypto06/25 16:17

Cardano wallet exploit: SecondFi traces attack to private key flaw, warns users not to restore seed phrases

ambcrypto06/25 16:17

Loss Exceeds $7.5 Million: Analysis of the Honeypot Attack Targeting MEV Bot and Tracking of Stolen Funds

On June 21, Jaredfromsubway.eth, one of Ethereum's most active MEV bots, suffered a sophisticated honeypot attack, losing over $7.5 million in crypto assets. Attackers deployed a complex contract system, including a coordinator, trigger, and fake token/pair contracts, to exploit the bot's arbitrage logic. The core attack trick involved baiting the bot with transactions: small trades appeared normal and consumed token approvals, while larger trades preserved these approvals by using fake swaps. This left the bot with large, unused approvals for assets like USDC, USDT, and WETH. The attacker then drained these approvals in a final step. The stolen funds—$2.87M USDC, $2.04M USDT, and 1,474 WETH—were consolidated and partially laundered through Tornado Cash. This incident highlights that MEV bots must not rely solely on simulated profits for security. Extra caution is required with unfamiliar contracts or custom wrappers in arbitrage paths, and post-transaction allowance checks are strongly recommended.

marsbit06/22 08:30

Loss Exceeds $7.5 Million: Analysis of the Honeypot Attack Targeting MEV Bot and Tracking of Stolen Funds

marsbit06/22 08:30

Ripple’s Move To Privacy: How A Re-organization Of The XRP Ledger Will Affect The Network

Ripple's former CTO David Schwartz discussed how the XRP Ledger (XRPL) could respond to potential state-level attacks. While acknowledging that authoritarian regimes could cause temporary disruptions by targeting the validator network, Schwartz argued that long-term control is unlikely due to the network's decentralized structure, where Ripple-run validators comprise less than 20%. The network's resilience hinges on its ability to replace compromised validators. For sustained threats, Schwartz proposed a theoretical two-layer consensus reorganization. An inner layer of validators would handle daily operations, while an outer layer would manage changes to the validator set. This outer layer could operate more discreetly and infrequently, potentially using anonymizing services like Tor, making it harder to target. The core point is that the XRPL community could adapt its structure to maintain operations even under significant external pressure.

bitcoinist06/01 18:01

Ripple’s Move To Privacy: How A Re-organization Of The XRP Ledger Will Affect The Network

bitcoinist06/01 18:01

Morning Post | Michael Saylor Says This Week's Buy Was Bonds, Not Bitcoin; StablR Suffers Attack Losing Approximately $2.8 Million; US Congress Reintroduces Bitcoin Reserve Bill

This cryptocurrency industry digest covers key developments from May 25. MicroStrategy's Michael Saylor clarified the company purchased bonds, not Bitcoin, this week. In regulatory news, the US Congress reintroduced a Bitcoin reserve bill, with Republican backing aiming to accumulate 5% of global supply. The legal and audit firms for the collapsed FTX agreed to a $66 million settlement over fraud allegations. Several CFTC officials skeptical of prediction market oversight were reportedly suspended and forced out. On the security front, the StablR stablecoin was attacked and de-pegged, resulting in an estimated $2.8 million loss for the attacker. The Ethereum Foundation faced criticism, though a researcher defended its core protocol-building mission over influencing ETH's price. Market data from GMGN showed the top 24-hour trending meme tokens on ETH were HEX, SHIB, LINK, PEPE, and mUSD. On Solana, leaders were TROLL, neet, WORLDCUP, HANTA, and Buttcoin. Base chain's top tokens included TOSHI, KEYCAT, BRETT, CLANKER, and LUNA. Featured articles included an a16z analysis arguing tokenization, or real-world assets (RWA), is fundamentally transforming asset nature and financial systems, with the market growing tenfold to ~$34 billion in two years. Another piece deconstructed Hyperliquid's success through a five-layer financial stack framework, emphasizing the critical importance of building from a robust settlement layer upward.

链捕手05/25 01:33

Morning Post | Michael Saylor Says This Week's Buy Was Bonds, Not Bitcoin; StablR Suffers Attack Losing Approximately $2.8 Million; US Congress Reintroduces Bitcoin Reserve Bill

链捕手05/25 01:33

Crypto Security Fears Rise As Chaos Labs Reveals Attempted Advanced Wallet Attack

Chaos Labs disclosed a sophisticated attempted hack targeting its operational wallets over a weekend, prompting several crypto firms to switch oracle providers. Borrowing platform Tydro, Solv Protocol, and Kelp DAO are among those migrating to Chainlink's oracle infrastructure, signaling a broader shift in confidence. Chaos Labs founder Omer Goldberg stated the attack was contained to routine operational wallets and that the core Chaos Oracle Network was not breached. The company rotated all keys and detected no further suspicious activity. Cyber professionals informed Chaos Labs that the methods were consistent with a nation-state attack, though no specific country was named. This incident occurs amid a difficult month for crypto security, including the high-profile Kelp DAO exploit in April.

bitcoinist05/09 09:04

Crypto Security Fears Rise As Chaos Labs Reveals Attempted Advanced Wallet Attack

bitcoinist05/09 09:04

OpenClaw Goes Viral, Exposing 12 Types of Critical Vulnerabilities; MCP Protocol Security Benchmark Released

The rapid rise of OpenClaw and similar AI Agents highlights the growing security risks associated with the Model Context Protocol (MCP), a standard enabling models to interact with external tools. Researchers from Beijing University of Posts and Telecommunications introduced MSB (MCP Security Bench), a security benchmark identifying 12 types of attacks across MCP’s three core stages: task planning, tool invocation, and response handling. These include name collision, false errors, retrieval injection, and mixed attacks. Notably, more capable models are often more vulnerable, with an average attack success rate (ASR) of 40.35%. The study also proposes a new metric, Net Resilient Performance (NRP), to balance security and utility. MSB evaluates agents in real-world environments, demonstrating that attacks remain effective even when harmless tools are present. The work underscores the urgent need for robust safety measures as AI agents gain broader tool-use capabilities.

marsbit04/16 04:04

OpenClaw Goes Viral, Exposing 12 Types of Critical Vulnerabilities; MCP Protocol Security Benchmark Released

marsbit04/16 04:04

Android Flaw Leaves 30 Million Crypto Wallets Open To Attack: Microsoft Analysts

Microsoft analysts revealed a critical security flaw in the EngageLab SDK (v4.5.4), leaving over 30 million Android crypto wallets vulnerable to attack. The "intent redirection" vulnerability allowed a malicious app to bypass Android's sandbox and gain read/write access to a wallet's private data, including seed phrases and keys, without any user interaction. A patch (SDK 5.2.1) was released in mid-2025. Users who haven't updated their apps since then are advised to not only update but also move their funds to new wallets with fresh seed phrases, as any unpatched wallet is considered compromised. The flaw also affected over 50 million apps in total.

bitcoinist04/11 15:31

Android Flaw Leaves 30 Million Crypto Wallets Open To Attack: Microsoft Analysts

bitcoinist04/11 15:31

活动图片

Othersright-arrow

Indepth Researchright-arrow