Polygon smart contracts under attack, but the real danger may be just starting!

ambcrypto2026-01-17 tarihinde yayınlandı2026-01-17 tarihinde güncellendi

Özet

Blockchain technology's growth is increasingly exploited by threat actors, as evidenced by the DeadLock ransomware. This group uses Polygon smart contracts to dynamically rotate server addresses, making their infrastructure more resilient and evading traditional disruption methods. This highlights a concerning shift where decentralized systems, originally designed to prevent centralized abuse, are now being weaponized. Security firm Group-IB warns this is part of an emerging trend, citing similar campaigns like North Korea's UNC5342 using "EtherHiding" on Ethereum. The abuse of smart contracts for malware distribution and ransomware operations signals a deeper, growing threat to blockchain networks.

As blockchain adoption continues to grow, so does its misuse.

At a fundamental level, the technology is widely used to improve liquidity and efficiency across industries. However, threat actors are now leveraging it to make their infrastructure more resilient and harder to disrupt.

DeadLock ransomware is a clear example of this shift. According to Group-IB research, DeadLock uses Polygon [POL] smart contracts to rotate server addresses, allowing it to evade traditional detection methods.

Naturally, this puts the broader decentralization narrative under scrutiny.

In this case, Polygon smart contracts are the ones under pressure. Why does this matter? Blockchain technology was originally designed to prevent the kind of abuse historically seen in traditional, centralized systems.

However, the use of Polygon smart contracts to support ransomware operations shows that decentralized infrastructure can also be exploited by threat actors, raising the question: What does this mean for the network?

Polygon smart contracts – Part of an emerging malware trend

Looking closely, DeadLock isn’t just another ransomware.

In a centralized system, stopping an attack can be as easy as flipping a switch. However, with decentralized setups like Polygon smart contracts, teams can’t just “turn it off” as the control is baked into the core of the network.

Notably, that’s exactly what this technique is taking advantage of. And now, imagine this as part of an “emerging trend” where more attacks are likely to leverage smart contracts across other blockchain platforms.

That brings us to what Group-IB analysts are warning about.

As shown in the chart above, Google recently reported that the North Korean (DPRK) threat actor UNC5342 used a technique called “EtherHiding.” This leverages blockchains to store and retrieve payloads.

Meanwhile, another campaign used Ethereum [ETH] smart contracts which were then used to download second-stage malware. In short, the DeadLock trick with Polygon smart contracts isn’t the end of this trend.

Instead, it could be just the start of deeper smart contract abuse.

Final Thoughts

DeadLock ransomware exploits Polygon smart contracts to rotate server addresses, showing how decentralized infrastructure can be abused.
Smart contract abuse is an emerging trend, with other campaigns like UNC5342 signaling deeper threats across blockchain platforms.

İlgili Sorular

QWhat is the primary method used by DeadLock ransomware to evade detection, according to the article?

ADeadLock ransomware uses Polygon smart contracts to rotate server addresses, allowing it to evade traditional detection methods.

QWhy can't teams simply 'turn off' an attack when it uses decentralized setups like Polygon smart contracts?

ABecause the control is baked into the core of the network in decentralized setups, making it impossible to just 'turn it off' like in a centralized system.

QWhat emerging trend in malware attacks does the article highlight beyond the DeadLock case?

AThe article highlights an emerging trend where threat actors are leveraging smart contracts across various blockchain platforms to store and retrieve payloads or download malware, as seen with campaigns like UNC5342 using Ethereum smart contracts.

QWhich threat actor used a technique called 'EtherHiding' to leverage blockchains, as mentioned in the article?

AThe North Korean (DPRK) threat actor UNC5342 used a technique called 'EtherHiding' to leverage blockchains for storing and retrieving payloads.

QWhat does the abuse of Polygon smart contracts by ransomware operations raise questions about?

AIt raises questions about the security and implications for the network, as decentralized infrastructure can be exploited by threat actors, contrary to blockchain's original design to prevent abuse in centralized systems.

İlgili Okumalar

E Fund "Quits Drinking"

"Yi Fang Da 'Gives Up Alcohol'" - Summary The article analyzes the recent portfolio adjustments of star fund manager Zhang Kun, focusing on his flagship funds, the Yi Fang Da Blue Chip Select and Yi Fang Da Quality Select. The key trend highlighted is a significant and ongoing reduction in exposure to the consumer sector, particularly liquor (baijiu) stocks like Kweichow Moutai and Wuliangye, which were once core holdings. This shift is driven by several factors: a downturn in the consumer sector's business cycle post-pandemic, with slowing earnings growth for major players; a change in consumer behavior towards value over premium brands; and high channel inventory pressures, especially in the liquor industry. These fundamentals have led to a prolonged phase of valuation contraction for consumer stocks. Concurrently, market capital has rotated aggressively towards the high-growth technology sector, especially AI-related chains, which have dominated fund inflows. This style shift has further diminished the attractiveness of traditional consumer "core assets" for many funds. As a result, Zhang Kun's funds have drastically cut their consumer stock allocations. For example, the Blue Chip Select's baijiu holding proportion has fallen from over 40% to around 20%, and its overall top 10 holdings concentration dropped sharply. This mirrors a broader trend in the active equity fund industry, where allocations to consumer staples have plummeted to multi-year lows while technology holdings have surged. The article concludes that while the consumer sector's valuations are now at historical lows, offering some margin of safety, the fundamental outlook remains challenging due to weak macro consumption recovery and intense internal competition. Therefore, the sector is likely to see only sporadic rebounds rather than a sustained recovery, continuing to weigh on the performance of funds still heavily invested in it. Zhang Kun's timely reduction of Korean semiconductor holdings in his Asia Select fund amid a market crash is also noted as a contrast to his domestic strategy.

marsbit8 dk önce

marsbit8 dk önce

Before the Second Attempt at Hong Kong IPO, Topstar 'Hands Out' 548 Million in Related-Party Orders

Tosda, an industrial robotics firm, is making its second attempt at a Hong Kong listing shortly after its first application lapsed. The company has undergone a significant strategic shift, pivoting away from its lower-margin intelligent energy and environmental management system (IEEMS) business to focus on core robotics and machinery. This "revenue-reduction, profit-growth" strategy saw revenue nearly halve from 2022 to 2025, but resulted in a sharp turnaround to profitability, with a 1147% year-on-year increase in Q1 2026 net profit. This restructuring involved spinning off the IEEMS business, leading to a substantial jump in related-party transactions. Following the departure of a former executive, two newly associated companies are expected to handle up to 548 million RMB worth of IEEMS orders in 2026, with Tosda acting as a platform charging a 3% management fee. While profitability has improved, several financial concerns remain. Accounts receivable collection cycles have lengthened, inventory—particularly for robots—has surged significantly despite falling revenue, and the company faces challenges in overseas market expansion. Notably, overseas business currently has a lower gross margin than domestic operations. The company was also recently reprimanded by regulators for accounting inaccuracies related to revenue recognition and bad debt provisions. The success of its strategic pivot and its second listing attempt will depend on managing these financial risks, the transparency of its new business model, and the long-term performance of its core robotics segment.

marsbit18 dk önce

Before the Second Attempt at Hong Kong IPO, Topstar 'Hands Out' 548 Million in Related-Party Orders

marsbit18 dk önce

Is the AI Bull Market in Jeopardy? Philadelphia Semiconductor Index Breaks Below Key Support at 11,200 Points

The Philadelphia Semiconductor Index (SOX) faces a critical technical and fundamental test. It recently breached a key short-term support level around 11,200 points—a level that held in mid-July—and closed below it. Technical indicators have deteriorated, with the 21-day moving average crossing below the 50-day, signaling bearish momentum. Should the 11,200 support fail, the next major support is the 200-day moving average. The sell-off, which saw memory chip stocks like Micron and Western Digital plunge over 10%, stems from growing concerns about the cyclicality and quality of AI demand. Market participants question the sustainability of the AI capital expenditure boom, highlighted by divergences between the capital expenditures of mega-cap tech firms and semiconductor index performance. However, some positive structural shifts are emerging. Institutional positioning has normalized, unwinding the previously crowded "long semiconductors, short Mag 7" trade, leaving cleaner positioning. Seasonal tailwinds are also approaching, as the NDX historically performs well after this period, potentially supporting a rebound if retail inflows resume. The core question is whether the SOX can hold the 11,200 support. A failure could trigger further declines toward the 200-day moving average, while a successful defense, combined with lighter positioning and seasonal support, could offer a recovery window for the sector.

marsbit18 dk önce

Is the AI Bull Market in Jeopardy? Philadelphia Semiconductor Index Breaks Below Key Support at 11,200 Points

marsbit18 dk önce

Silicon Valley Rises Against Anthropic

A backlash against Anthropic is growing in Silicon Valley, driven by concerns over competition with partners and its advocacy for a closed AI ecosystem. Critics point to the release of Claude Design, seen as competing directly with partner Figma, as a key moment that eroded trust. Figma's CEO reportedly stated Anthropic was not fully transparent. Anthropic faces further criticism for data retention policy changes, releasing a powerful model (Fable 5) that restricted answers on AI research, and its warnings about the risks of open-weight AI models. Skeptics, including some researchers and government officials, view these warnings as a tactic to stifle cheaper, customizable open-source competitors and shape favorable regulation, potentially creating an AI duopoly with OpenAI. While Anthropic defends its actions as necessary for safety and preventing misuse, the dissent has intensified. Over 70 companies, including OpenAI and Google, recently signed a letter supporting open models, which Anthropic did not join. The company's moves have prompted some startups and businesses to switch to lower-cost, open-weight alternatives, fearing Anthropic might use their data to build competing products.

marsbit33 dk önce

marsbit33 dk önce

Qualcomm and Arm Fall Together: The Bill for Memory Price Hikes Finally Arrives at Mobile Chip Companies

After posting Q2 FY2026 results, Qualcomm and Arm both saw their shares decline, reflecting the impact of memory price increases on the smartphone chip sector. Qualcomm's revenue of $9.95B slightly beat expectations, but EPS of $2.21 fell short. More concerning was its guidance for next quarter, with EPS projections below analyst estimates. The company directly attributed a >$1.50 per share annual EPS headwind to rising memory costs and supply constraints in Android phones, prompting planned price hikes. While automotive revenue grew 61% and is approaching one-third of phone revenue, the mobile segment declined 20%. Qualcomm also confirmed a significant reduction in its modem share for the upcoming iPhone and outlined a plan for data center revenue to replace all Apple-related income by FY2027. Arm's results surpassed expectations with revenue of $1.29B and EPS of $0.45, and its guidance was also strong. However, its stock fell. Key concerns included royalty revenue failing to set a new record and a downward revision to full-year royalty growth guidance from ~20% to the high-teens, citing weak smartphone demand and high memory prices. Despite robust growth in its data center business, Arm's premium valuation (over 100x forward P/E) means even beating expectations isn't enough to push the stock higher, as any sign of uncertainty is magnified. Ongoing global antitrust investigations add another risk factor. The situation highlights a broader shift. Memory price surges, which boosted Samsung's profits, are now pressuring chip designers. Meanwhile, the semiconductor sector saw significant corrections in July, with the hardest-hit stocks often being those with the biggest AI-driven gains year-to-date. Qualcomm, lacking such a premium, was an exception.

marsbit33 dk önce

Qualcomm and Arm Fall Together: The Bill for Memory Price Hikes Finally Arrives at Mobile Chip Companies

marsbit33 dk önce

İşlemler

Spot