# Exploit Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Exploit", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

ZachXBT flags suspected Trust Wallet extension issue as users report drained funds

Security concerns emerged around the Trust Wallet browser extension on December 25, after blockchain investigator ZachXBT flagged suspicious activity potentially linked to a recent update. Reports suggest a supply-chain compromise may have been introduced in a December 24 update, where newly added code could silently exfiltrate sensitive wallet data—particularly during seed phrase imports—leading to immediate fund draining. Multiple users reported losses, with unverified estimates exceeding $2 million. The malicious code allegedly sent data to a recently registered external domain mimicking Trust Wallet infrastructure. The issue appears limited to the browser extension, with no evidence of mobile app compromise. Trust Wallet has not yet issued an official response or advisory. Researchers emphasize the situation remains under investigation, warning users to avoid importing seed phrases into the extension until clarified. If confirmed, this would represent a significant supply-chain attack.

ambcryptoYesterday 21:57

ZachXBT flags suspected Trust Wallet extension issue as users report drained funds

ambcryptoYesterday 21:57

Gnosis announces hard fork to recover funds from Balancer exploit

Gnosis Chain has executed a hard fork to recover funds stolen during a $116 million Balancer exploit that occurred in November. The hard fork, carried out on Monday, follows a prior soft fork adopted by a majority of validators. According to Gnosis, the recovered funds are now out of the hacker’s control, though specific details on how users can reclaim their assets are still under community discussion. The team aims to enable fund recovery by Christmas, after which distribution mechanisms will be finalized. The original Balancer exploit targeted V2 Composable Stable Pools and resulted in over $116 million in outflows, with white hat hackers later recovering about $28 million. Despite 11 prior audits, the vulnerability was not detected.

cointelegraph12/23 20:14

Gnosis announces hard fork to recover funds from Balancer exploit

cointelegraph12/23 20:14

Attacker takes over multisig minutes after creation, drains up to $40M slowly

A crypto attacker took control of a multisig wallet just minutes after its creation 44 days ago, ultimately draining up to an estimated $40 million. Blockchain analysis reveals the wallet was created by the victim on November 4th, but ownership was transferred to the attacker only six minutes later. The attacker then patiently drained and laundered the funds in stages, using Tornado Cash over several weeks. Security experts note the wallet was configured as a "1-of-1" multisig, requiring only one signature, which defeats its purpose. Possible attack vectors include malware, phishing, or poor security practices like storing keys in plaintext. The incident highlights growing security concerns, especially as new research shows AI models are already capable of autonomously finding and exploiting smart contract vulnerabilities.

cointelegraph12/18 13:14