QooryBeta
Back to narratives
SecurityEmerging
Conversation intelligence

Web3 security incident: 据 SlowMist 披露,MistEye 检测到一起协同恶意 npm 供应链攻击,攻击者通过虚假交易机器人仓库和 DeFi 主题 npm 包投放 JavaScript 信息窃取程序,目标包括 npm 用户、DeFi 开发者和交易机器人用户。该攻击涉及 30 个恶意 npm 包,

A fast-moving Web3 discussion is forming around Web3 security incident: 据 SlowMist 披露,MistEye 检测到一起协同恶意 npm 供应链攻击,攻击者通过虚假交易机器人仓库和 DeFi 主题 npm 包投放 JavaScript 信息窃取程序,目标包括 npm 用户、DeFi 开发者和交易机器人用户。该攻击涉及 30 个恶意 npm 包,.

Heat
72
Confidence
70%
Evidence
8
Updated

Why It Happened

Multiple social or news items are discussing the same topic in a short time window.

Actors

SlowmistBlockchain security company
PAPANews丨APP全面升级Project
SASafeDepProject
COCoin BureauProject
Timeline order

Post
Parent event 01

🔥Glad to support @HTX_DAO’s HTX Genesis Hackathon as a security partner! Hosted by HTX DAO & h…

🔥Glad to support @HTX_DAO’s HTX Genesis Hackathon as a security partner! Hosted by HTX DAO & https://t.co/lHXau7APFb, this global hackathon focuses on AI × Web3 innovations in smart finance, AI Agents, and on-chain infrastructure. $20,000 prize pool + $100k …

Related posts@SlowMist_Team
@SlowMist_TeamOfficial X
Open on X10.1K views · 22 likes · 3 reposts

Post
Parent event 02

🚨MASSIVE EXPLOIT IN CARDANO PROJECT DRAINS OVER $20 MILLION Cardano ecosystem project SecondFi…

🚨MASSIVE EXPLOIT IN CARDANO PROJECT DRAINS OVER $20 MILLION Cardano ecosystem project SecondFi has suffered a major exploit after a flaw in its wallet generation software allowed attackers to drain user funds. Security firm SlowMist says the total damage may…

Related posts@coinbureau
@coinbureauOfficial X
Open on X565.0K views · 1.3K likes · 286 reposts

Post
Parent event 03

🚨SlowMist TI Alert🚨 AIDC token on BSC has been exploited. 💸 Loss: 220.12 WBNB (~$120929.35) …

🚨SlowMist TI Alert🚨 AIDC token on BSC has been exploited. 💸 Loss: 220.12 WBNB (~$120929.35) 🔍 Root Cause: AIDCToken's `_sellTransfer()` accumulates a 30% burn amount without deducting it from the seller. Subsequently, any non-Pair transfer triggers `_exec…

Related posts@SlowMist_Team
@SlowMist_TeamOfficial X
Open on X16.8K views · 97 likes · 26 reposts

Post
Parent event 04

🥳Congrats to @OKX on the launch of OKX AI! 🚀 SlowMist will join the OKX AI ecosystem as a sec…

🥳Congrats to @OKX on the launch of OKX AI! 🚀 SlowMist will join the OKX AI ecosystem as a security capability partner. Our Security Agent Skills will be integrated and made available on the platform in the next phase, bringing trusted security capabilities …

Related posts@SlowMist_Team@safedepio
@SlowMist_TeamOfficial X
Open on X11.8K views · 58 likes · 5 reposts
@safedepioOfficial X
Open on X556 views · 12 likes · 5 reposts

Post
Parent event 05

🚨SlowMist TI Alert🚨 💸 @edeldotfinance Loss: ~ $350k 🔍 Root Cause: `latestAnswer()` in price…

🚨SlowMist TI Alert🚨 💸 @edeldotfinance Loss: ~ $350k 🔍 Root Cause: `latestAnswer()` in price source reads `convertToAssets()` from ERC4626 vault. Vault's `totalAssets()` directly uses underlying asset balance, allowing attacker to donate assets via direct …

Related posts@SlowMist_Team@SlowMist_Team@PANewsCN
@SlowMist_TeamOfficial X
Open on X16.2K views · 59 likes · 9 reposts
@SlowMist_TeamOfficial X
Open on X2.3K views · 12 likes · 4 reposts
@PANewsCNOfficial X
Open on X5.3K views · 9 likes · 0 reposts