# Сопутствующие статьи по теме Security

Новостной центр HTX предлагает последние статьи и углубленный анализ по "Security", охватывающие рыночные тренды, новости проектов, развитие технологий и политику регулирования в криптоиндустрии.

North Korean Hackers Celebrate a 'Fat Year': Record $2.02 Billion Stolen in 2025, Money Laundering Cycle Approximately 45 Days

North Korean hackers set a record in 2025, stealing $2.02 billion in cryptocurrency, a 51% increase from 2024, despite a decrease in the number of attacks. Their cumulative thefts now total at least $6.75 billion. They achieved this by conducting fewer but more sophisticated attacks, often through infiltrating crypto services with IT workers or using complex impersonation strategies against executives. The overall crypto industry suffered over $3.4 billion in stolen funds. A key trend is the extreme concentration of losses, with the top three hacks accounting for 69% of the total. The disparity between the largest attack and the median hack reached a record 1000x. North Korean actors exhibited distinct money laundering patterns, heavily favoring Chinese OTC services, cross-chain bridges, and mixers. Their laundering cycle for major heists is approximately 45 days, moving through stages of immediate layering, initial consolidation, and final cash-out. Simultaneously, individual wallet thefts surged to 158,000 incidents affecting 80,000 users, though the total value stolen ($713 million) decreased. In a positive development, DeFi hacking losses remained low despite increased Total Value Locked (TVL), indicating improved security measures are having a significant impact. A case study of the Venus Protocol demonstrated effective real-time threat detection and fund recovery.

marsbit01/10 03:10

North Korean Hackers Celebrate a 'Fat Year': Record $2.02 Billion Stolen in 2025, Money Laundering Cycle Approximately 45 Days

marsbit01/10 03:10

Public Wi-Fi and a Phone Call: How They Became the Perfect Trap to Steal $5000 in Crypto Assets?

An individual lost approximately $5,000 in cryptocurrency assets after connecting to a public hotel Wi-Fi network during a vacation. The attack began when the victim was overheard discussing crypto and using a Phantom wallet in a public area, making them a target. While browsing on the unsecured Wi-Fi, the attacker executed a man-in-the-middle attack, injecting malicious code into a seemingly legitimate webpage. The victim was using Jupiter Exchange to swap tokens when a fraudulent transaction approval request was triggered, disguised as a normal operation. Instead of a direct fund transfer, the request asked for “authorization” or “session approval,” granting the attacker permission to act on the wallet. The victim approved, believing it was part of the Jupiter transaction. The attacker waited until the victim left the hotel to drain the wallet of SOL, tokens, and NFTs. Key mistakes included: using public Wi-Fi instead of a mobile hotspot, discussing crypto in public, and approving a transaction without thorough verification. The wallet was a secondary hot wallet, not the main storage, preventing greater losses. The incident highlights the risks of public networks and the importance of transaction scrutiny.

比推01/09 14:32

Public Wi-Fi and a Phone Call: How They Became the Perfect Trap to Steal $5000 in Crypto Assets?

比推01/09 14:32

After Three Days on Hotel Wi-Fi, My Crypto Wallet Was Drained

While on vacation, the author connected to an unsecured hotel Wi-Fi network without a password, only a captive portal login. After discussing cryptocurrency topics on a phone call in a shared space, an attacker nearby identified him as a crypto user with a Phantom wallet. The attacker executed a man-in-the-middle attack, injecting malicious code into a webpage the author visited. While using JupiterExchange for a swap, a fraudulent transaction approval request was triggered, disguised as a legitimate platform action. The author approved what appeared to be an authorization or session confirmation—not a direct fund transfer—granting the attacker permission to access his wallet. Days after leaving the hotel, the attacker drained his SOL, tokens, and NFTs. The author lost around $5,000 from a secondary hot wallet, emphasizing mistakes: using public Wi-Fi, discussing crypto in public, and approving transactions without thorough verification. He advises using mobile hotspots, avoiding public crypto discussions, and scrutinizing every wallet request.

marsbit01/09 11:03

After Three Days on Hotel Wi-Fi, My Crypto Wallet Was Drained

marsbit01/09 11:03

Loss Exceeding $26 Million: Analysis of Truebit Protocol Security Incident and Tracking of Stolen Funds Flow

On January 9, the Truebit Protocol suffered an attack resulting in a loss of 8,535.36 ETH (approximately $26.4 million) due to an exploit in a five-year-old unaudited and unopen-sourced contract. The attack involved a suspected arithmetic logic flaw, possibly due to integer truncation, in an unverified function (0xa0296215). The attacker repeatedly called this function with a minimal msg.value to mint a large number of TRU tokens, which were then burned to withdraw ETH from the contract’s reserves. According to Beosin’s analysis, the stolen funds—totaling 8,535.36 ETH—were primarily transferred to two addresses: 0xd12f6e0fa7fbf4e3a1c7996e3f0dd26ab9031a60 (holding 4,267.09 ETH) and 0x273589ca3713e7becf42069f9fb3f0c164ce850a (holding 4,001 ETH). The attacker’s address (0x6c8ec8f14be7c01672d31cfa5f2cefeab2562b50) still retains 267.71 ETH. All related addresses have been flagged as high-risk by Beosin KYT. The incident underscores the importance of security audits, contract upgrades, and incorporating emergency pause mechanisms and modern Solidity safety features to mitigate risks in legacy smart contracts.

marsbit01/09 10:46

Loss Exceeding $26 Million: Analysis of Truebit Protocol Security Incident and Tracking of Stolen Funds Flow

marsbit01/09 10:46

Penetrating the Noise of Ethereum's 'Degeneration': Why is 'Ethereum Values' the Widest Moat?

Amidst recent debates questioning Ethereum's perceived "regression" compared to high-performance blockchains, this article argues that Ethereum’s core strength lies in its foundational values—decentralization, censorship resistance, and long-term reliability—rather than short-term efficiency. While other chains prioritize speed through centralized trade-offs, Ethereum emphasizes resilience under worst-case conditions. It has never experienced a full-network outage or rollback in nearly a decade of operation. This resilience stems from deliberate design choices: avoiding hardware centralization, maintaining low node operation costs, and ensuring ordinary users can verify the chain. The concept of "Ethereum Alignment" is clarified not as blind loyalty but as a multidimensional social contract involving technical alignment (using Ethereum’s consensus and open standards), economic alignment (value accrual to ETH), and ideological alignment (public good over extractive growth). Ethereum’s slower evolution reflects a conscious trade-off: performance improvements must integrate with existing security assumptions without compromising decentralization or censorship resistance. Despite criticism, growing ETH staking numbers indicate continued trust in its model. In essence, Ethereum’s “conservative” is strategic—prioritizing sustainable trust over temporary gains, making its value proposition the widest moat in Web3.

marsbit01/09 10:40

Penetrating the Noise of Ethereum's 'Degeneration': Why is 'Ethereum Values' the Widest Moat?

marsbit01/09 10:40

Truebit Confirms Smart Contract Exploit as TRU Price Crashes

Truebit, an Ethereum-based DeFi protocol, confirmed a smart contract exploit on January 8. The incident involved a logic flaw in a minting contract that allowed an attacker to repeatedly exploit incorrect pricing calculations, leading to a loss of 8,535 ETH (approximately $26.44 million). Following the announcement, the price of the TRU token collapsed by 99.99%, dropping from $0.16 to nearly zero. Truebit is working with law enforcement and has advised users to avoid interacting with the affected contract. No official recovery plan has been released yet.

TheNewsCrypto01/09 07:29

Truebit Confirms Smart Contract Exploit as TRU Price Crashes

TheNewsCrypto01/09 07:29

HTX Releases 2025 Recap and 2026 Outlook Report: Trading Volume Steadily Grows and Longtermism Defines the Next Expansion Cycle

Amid global macroeconomic uncertainty and a maturing crypto cycle, 2025 marked a shift from sentiment-driven trading to structural rebalancing. HTX released its annual report, highlighting robust growth: registered users surpassed 55 million, trading volume reached $3.3 trillion (up 39% YoY), and net capital inflows totaled $608 million, all while maintaining a zero-security-incident record. Spot trading volume exceeded 1.9 trillion USDT, with smart trading tools like bots seeing a 97% volume increase. The exchange listed 166 new assets, capturing early value in narratives like memecoins and AI. Futures trading grew 50% YoY to $1.4 trillion, supported by product upgrades and improved liquidity. HTX expanded its multi-layer capital management services, including Earn, Margin, and Collateral Swap, serving over 600,000 users. Security remained a cornerstone with monthly Proof of Reserves showing ratios above 100% for all major assets. Compliance advanced with progress in multi-jurisdictional licensing. Looking to 2026, HTX will focus on enhancing core trading products, improving capital efficiency, and strengthening security and compliance to drive long-term ecosystem growth.

TheNewsCrypto01/09 07:23

HTX Releases 2025 Recap and 2026 Outlook Report: Trading Volume Steadily Grows and Longtermism Defines the Next Expansion Cycle

TheNewsCrypto01/09 07:23

Truebit protocol confirms security incident as exploit drains over $26m in ETH

Truebit protocol confirmed a security breach on January 7, resulting in a loss of over 8,500 ETH (approximately $26 million). The exploit targeted a pricing flaw in a smart contract function that allowed attackers to mint tokens for free and drain ETH reserves through rapid buy-sell loops. Most stolen funds were consolidated into a single address, with half quickly routed through Tornado Cash. The TRU token price collapsed by over 60% following the incident. Truebit is working with law enforcement and has urged users to avoid interacting with the affected contract. The attack reflects a broader trend of rising crypto-related crime driven by economic incentives.

ambcrypto01/08 22:48

Truebit protocol confirms security incident as exploit drains over $26m in ETH

ambcrypto01/08 22:48

These Uncommon Items in the Crypto World Are All on Xianyu

The article explores the unexpected presence of cryptocurrency-related items on Xianyu, a Chinese second-hand marketplace. It begins with the discovery of crypto exchange merchandise, such as branded apparel, accessories, and unique promotional items like Binance's playing card set, OKX's moon lamps, Bitget's Messi-branded football, and HTX's "fortune basin." Notably, a Binance-themed bottle of Moutai is highlighted as a premium listing. The piece also covers the sale of small Bitcoin mining devices, referred to as "lottery machines" on the platform, which have an extremely low probability of mining a block. Additionally, it discusses the availability of Solana Saga and Seeker phones, noting the logistical and technical challenges for Chinese buyers, including activation hurdles and VPN requirements for setup. Finally, the author mentions listings for "private key/seed phrase collision tools," dismissing them as practically impossible scams. The article concludes by marveling at the diverse and unconventional crypto-related goods found on Xianyu, suggesting that the platform's potential is vastly underutilized.

marsbit01/08 10:08

These Uncommon Items in the Crypto World Are All on Xianyu

marsbit01/08 10:08

Blockchain Security Science Popularization: Five Identification Techniques to Stay Away from Virtual Currency Pyramid Schemes

Blockchain Security Guide: 5 Tips to Identify and Avoid Virtual Currency Pyramid Schemes As blockchain technology gains popularity, virtual currencies have become a target for criminals who use them as tools for online pyramid schemes. These scams, often disguised as "blockchain innovations" or "virtual asset growth opportunities," lure victims with promises of "guaranteed returns,""overnight wealth," and "always rising values." Unlike traditional pyramid schemes, these operations leverage the decentralized and anonymous nature of cryptocurrencies, using high returns to encourage recruiting downlines. They are more hidden, spread faster, and cause greater harm. Common scam models include: 1. Fake contract exchanges that use pyramid-style commissions. 2. Staking mining schemes that lock funds and require recruiting others. 3. Wallet-based理财 (financial management) apps that use fake arbitrage earnings. 4. DeFi smart contracts that drain funds once deposited. 5. Quant trading bots that show fake profits and steal assets. Key risks: - Irreversible financial losses due to offshore fund transfers. - Legal liability for participants who recruit others. - Disruption of financial order and potential money laundering. - Damage to legitimate blockchain industry development. Regulatory red flags: China bans illegal virtual currency issuance and trading, with strict penalties for pyramid schemes under criminal law. To identify these scams, check if the virtual currency is used as an entry fee, a reward calculation tool, or a recruitment incentive. If profits depend on recruiting others rather than market fluctuations, it is likely a pyramid scheme. Conclusion: The core of these scams remains "recruiting members, multi-level rewards, and fund theft." Remember: high returns come with high risks; guaranteed profits are scams. Stay cautious, avoid greed, and verify projects through professional security services.

marsbit01/08 03:36

Blockchain Security Science Popularization: Five Identification Techniques to Stay Away from Virtual Currency Pyramid Schemes