A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
Within 48 hours, both CoinMarketCap and Cointelegraph were compromised, each incident using nearly identical tactics: inject malicious front-end code, push a “verify your wallet” notice, siphon funds.
Binance founder CZ took to X after the second breach, reminding traders that it’s now human error—one careless click—rather than faulty code that hackers bet on: “Information sites are the latest target. Think twice before authorizing any wallet connect.”
Security firm CertiK says 2025 thefts have already topped $2.1 billion, with wallet-phishing now the dominant vector. Co-founder Ronghui Gu sums it up: “Code is getting harder to exploit, so criminals pivot to people.”
Smart contracts may be maturing, but the weakest link has simply moved up the stack—to the person behind the screen.
CoinMarketCap, one of the most widely used crypto data tracking platforms, is reportedly facing a front-end security breach, with multiple users encountering a suspicious prompt to verify their wallets.
Russia’s attempt to formalize its crypto mining sector is falling short, with most miners opting to remain off the books despite new regulations.
A well-known investor at crypto VC firm Hypersphere has fallen victim to an elaborate phishing attack that wiped out a substantial portion of his personal savings.
Iranian authorities have imposed new restrictions on domestic cryptocurrency exchanges following a large-scale cyberattack on Nobitex, the country’s leading trading platform.