cybersecurity | ForkLog

ForkLog 46 11.04.2025

Life after Bybit

The industry took the Bybit breach in its stride, but it left a trail of questions. In an interview with FLMonthly, Irakli Dizenko, an expert in deploying crypto-security tools at HAPI, discusses whether DeFi should expect tighter rules, and the state of hacks in general and this case in particular. ForkLog: The Bybit breach ranks […]

AI translated

ForkLog 13 09.04.2025

Hackers Exploit Microsoft Office Extensions to Target Crypto Investors

Cybercriminals are distributing embedded miners and malware designed to steal cryptocurrency through counterfeit Microsoft Office extensions. This was reported by experts from Kaspersky Lab. The hackers operate via the popular software hosting portal SourceForge. They have uploaded a project named officepackage, offering add-ons for office programs, legitimately copied from GitHub. However, upon clicking the link, […]

AI translated

ForkLog 206 31.03.2025

Experts Unveil Details of Oracle Manipulation Attack on Venus Protocol

Vulnerabilities in vaults have led to losses for DeFi protocols due to oracle manipulation. Chaos Labs presented an analysis of the attack on Venus Protocol, which resulted in losses of approximately $716,000. On February 27, an attacker executed a donation attack based on a flash loan, borrowing about $4 million from Aave. The attacker used […]

AI translated

ForkLog 32 31.03.2025

Experts Uncover Android Trojan Targeting Crypto Wallets

Experts at Threat Fabric have identified a new family of malware for Android mobile devices. The Trojan targets specific banking applications and popular cryptocurrency wallets. A new mobile banking Trojan has emerged—#Crocodilus. Discovered during regular threat hunting, it’s already showing capabilities that rival top malware families, including device takeover and advanced credential theft.https://t.co/RlyfFxUYHe#BankingTrojan #ThreatFabric pic.twitter.com/47zPbPfFad […]

AI translated

ForkLog 39 16.03.2025

Hackers Spread False Alerts in Kaito’s Name

Unknown individuals breached the X accounts of the Kaito platform and its founder Yu Hu to disseminate false messages about issues with the project’s token. This account and @Punk9277 were just compromised. The KAITO wallets were NOT and are NOT compromised. We now have regained access to the twitter accounts. Please bare with us as […]

AI translated

ForkLog 55 12.03.2025

Lazarus Hackers Launch New Attack via GitHub

North Korean hacker group Lazarus has released six infected npm packages on the GitHub platform, capable of stealing keys from cryptocurrency wallets, according to experts from Socket. Experts noted that the perpetrators attempted to disguise the infected code as popular libraries frequently downloaded from the platform. The hackers hope developers will use the compromised files, […]

AI translated

ForkLog 43 04.03.2025

Bybit CEO: 20% of Stolen Assets Have ‘Gone Dark’

77% of the approximately 500,000 ETH stolen in the Bybit hack remain traceable, 20% have ‘gone dark’, and 3% have been frozen, according to details shared by the exchange’s CEO, Ben Zhou. 3.4.25 Executive Summary on Hacked Funds: Total hacked funds of USD 1.4bn around 500k ETH, 77% are still traceable, 20% has gone dark, […]

AI translated

ForkLog 27 25.02.2025

Adam Back Attributes Bybit Hack to EVM Flaws

The “flawed design of the EVM” was the cause of the Bybit hack, according to Blockstream co-founder and cryptographer Adam Back. people are misunderstanding critique of repeated EVM hacks, latest & largest ByBit $1.4b. missing the point: EVM can go to ZERO, no one cares! but MSM & bystanders are confused, problem is the EVM […]

AI translated

ForkLog 44 19.02.2025

Researchers Uncover Cryptocurrency Key Thief in Steam Game

Malefactors exploited a game on the Steam platform to disseminate the Vidar malware, capable of extracting critical data from a victim’s computer, including cryptocurrency wallet keys. This was reported by TechCrunch, citing SECUINFRA experts. The application, now removed from Steam, was a modified version of the Easy Survival RPG game template. According to SECUINFRA analyst […]

AI translated

ForkLog 16 19.02.2025

HTX Issued Over 380,000 Security Alerts in January, Report Reveals

In January 2025, the cryptocurrency exchange HTX dispatched 380,003 security alerts: 339,480 via email and 40,523 through SMS, according to its monthly report. The HTX team shut down six phishing sites and fake app download resources, and thwarted three attempts to withdraw funds to fraudulent addresses, returning 72,962 USDT to users. Data: HTX. HTX also […]

AI translated

ForkLog 34 27.01.2025

How CoinEx Secures User Bitcoin: Support from ViaBTC, SlowMist, and Proof-of-Reserves

The bull market of 2025 presents new opportunities for investors, yet the security of CEX remains a weak point in the crypto industry. In January, Singapore-based crypto exchange Phemex already faced a hot wallet hack. This article, in collaboration with the CoinEx platform team, highlights what to consider when choosing a trading platform. Trust, but […]

AI translated

ForkLog 42 23.01.2025

A subscription to crime: how rented hacking software imperils Web3

Disclaimer This material is published for informational purposes and does not constitute an incitement to unlawful activity. According to Chainalysis, the amount stolen in the crypto industry in 2024 rose by about 21% to $2.2bn. Most of it came from DeFi services. The ForkLog team reviewed several illicit marketplaces to assess how accessible and easy […]

AI translated

#cybersecurity