#Peckshield

[zero2046-blog]

Cork Protocol 攻击者已将 4,530.59 枚ETH转移到新地址

深潮 TechFlow 消息，6 月 19 日，据PeckShield监测，Cork Protocol 攻击者已将 4,530.59 枚ETH转移到新地址，价值约 1140 万美元。

[geeknik]

May’s $244M hack losses ‘down 40%’—but just one MSB exploit vacuumed 91% of that. ‘Freezing 71%’ is damage control theater. Lazarus still farms while infra bakes in desert sun. #LayerZeroDays

[news786hz]

Major crypto hacks fell 40% in May, says PeckShield

Major crypto hacks fell 40% in May, says PeckShield

[zohaibyter]

Major crypto hacks fell 40% in May, says PeckShield

In May, the total amount stolen from crypto hacks declined drastically compared to April, with the largest incident making up around 90% of the month’s total, according to a blockchain security firm. The decline comes as the crypto industry has been stepping up its efforts to stay ahead of hackers. “In May 2025, ~20 major crypto hacks were recorded, resulting in total losses of $244.1M — a 39.29%…

[brogx308]

Sistem Kredit On-Chain dan Sistem Cerdas Bergerak Bersama, Terobosan Layanan BROGX pada Tahun 2024

Pada tahun 2024, pasar mata uang kripto global mengalami perubahan signifikan yang dipengaruhi oleh berbagai faktor. Tahun ini, ETF spot Bitcoin secara resmi disetujui, dan harganya menembus batas 100.000 dolar AS pada bulan Desember, mencetak rekor tertinggi sepanjang sejarah. Sementara itu, volatilitas pasar keuangan global semakin meningkat, dan penyesuaian kebijakan moneter oleh Federal Reserve dan Bank Sentral Eropa menarik perhatian luas dari pasar. Dalam latar belakang ini, bursa BROGX berhasil mencapai terobosan penting di pasar kripto global melalui serangkaian inovasi teknologi dan kolaborasi global, semakin memperkuat posisinya di industri ini.

Meluncurkan Sistem Manajemen Risiko Cerdas yang Didorong oleh AI untuk Meningkatkan Keamanan Transaksi Laporan Tahunan Keamanan Kripto PeckShield menunjukkan bahwa pada tahun 2024, celah-celah terkait mata uang kripto sering muncul, dengan total kerugian yang melebihi 3 miliar dolar AS. Pada bulan Februari, BROGX meluncurkan sistem manajemen risiko cerdas yang didorong oleh AI, yang menggabungkan teknologi pembelajaran mesin dan analisis perilaku pengguna secara mendalam. Sistem ini dapat memantau perilaku transaksi di platform secara real-time, mengenali dan memblokir transaksi mencurigakan seperti manipulasi pasar dan akses akun yang tidak sah. Sejak sistem ini diluncurkan, keamanan transaksi di platform meningkat secara signifikan, dengan efisiensi pemblokiran transaksi mencurigakan meningkat 45%, dan perlindungan keamanan aset pengguna tetap menjadi yang terdepan di industri.

Meluncurkan BROGX AI Trading Bot 1.0, Meningkatkan Efisiensi Transaksi Dengan terus mengoptimalkan keamanan, BROGX lebih lanjut mengeksplorasi potensi aplikasi kecerdasan buatan di bidang transaksi. Pada bulan Mei, BROGX AI Trading Bot 1.0, robot perdagangan cerdas, resmi diluncurkan, menggunakan pembelajaran penguatan dan algoritma perdagangan frekuensi tinggi untuk menyediakan strategi eksekusi perdagangan cerdas bagi para investor. Berdasarkan data, setelah peluncuran robot ini, kecepatan eksekusi transaksi meningkat lebih dari 60%, dan volume perdagangan harian per pengguna platform meningkat lebih dari 15%. Hal ini juga menjadikan BROGX sebagai tolok ukur layanan cerdas baru di antara platform perdagangan sejenis.

Berkerja Sama dengan SWIFT, Menjelajahi Inovasi Keuangan Lintas Negara Selain di bidang teknologi, BROGX juga aktif menjelajahi kerja sama keuangan lintas negara. Pada bulan September, BROGX mengumumkan bahwa mereka telah mencapai kerja sama inovasi keuangan lintas negara dengan raksasa kliring pembayaran global SWIFT, untuk bersama-sama meneliti mekanisme penyelesaian terstandarisasi antara mata uang digital bank sentral (CBDC) dan aset kripto. Kerja sama ini memungkinkan BROGX untuk menjadi yang pertama menghubungkan saluran pembayaran lintas negara tradisional dengan perdagangan aset digital, yang menarik hampir 50 lembaga keuangan internasional untuk membahas peluang kerja sama. Pihak terkait dari SWIFT menyatakan, "Keahlian BROGX di bidang keuangan digital memberikan dukungan yang kuat untuk penelitian inovasi kami, dan kerja sama ini diharapkan dapat mendorong seluruh industri menuju arah standarisasi dan skala yang lebih besar."

Meluncurkan Sistem Penilaian Kredit On-Chain, Mendorong Pengembangan Ekosistem DeFi Untuk lebih mendorong pembangunan sistem kredit industri, pada bulan November, BROGX secara resmi meluncurkan sistem penilaian kredit on-chain (On-Chain Credit Score). Sistem ini secara inovatif mengintegrasikan teknologi identifikasi terdesentralisasi (DID), yang melalui data transaksi historis pengguna, kemampuan pembayaran, dan kepemilikan aset on-chain, secara akurat menghasilkan skor kredit on-chain. Sistem ini membantu pengguna untuk berpartisipasi dalam berbagai protokol DeFi dengan batas kredit. Sejak diluncurkan, lebih dari 200.000 pengguna telah menyelesaikan verifikasi penilaian, dan skor kredit ini memungkinkan pengguna untuk memperoleh lebih banyak keuntungan dan hak istimewa dalam berbagai skenario keuangan di platform, seperti partisipasi dalam protokol DeFi, staking, dan perdagangan NFT.

Pada tahun 2024, bursa BROGX telah berhasil mencapai terobosan penting di pasar kripto global melalui inovasi teknologi dan kerja sama global. Melihat ke depan, BROGX akan terus meningkatkan investasi dalam penelitian dan pengembangan teknologi, menjelajahi lebih banyak aplikasi teknologi canggih, dan terus memperbarui mekanisme keamanan untuk memastikan keamanan mutlak aset pengguna. Seiring dengan perkembangan pasar mata uang kripto yang terus berlanjut, BROGX akan terus memimpin inovasi industri dan memberikan layanan keuangan kripto yang lebih berkualitas dan aman bagi penggunanya.

[arbitcoin]

كان المسك تظاهر بأنه عملة معدنية مرة أخرى! يتلقى Binance CZ 90 مليون عملات مزيفة Grok ، ولا يمكن لـ Meta و Coinbase الهروب من اليد السحرية

موجة الاحتيال من الذكاء الاصطناعى تحت اسم إيلون موسك عادت! حتى Binance CZ أصبح هدف نقل العملة المزيفة. نشرت شركة الأمن Peckshield على Twitter (X) في 4/21 أنه تم إرسال ما يصل إلى 90 مليون رمز Grok المزيف إلى محفظة CZ مؤخرًا ، والتي يُشتبه فيها أنها موجة جديدة من هجمات الاحتيال في العناوين المتعددة الأحزاب. استلمت محفظة CZ فجأة عملات Grok ، Pai Shield: قد تكون عملية احتيال باي درعفي 4/21 ، وجدت أن عنوان محفظة CZ تلقى فجأة ما يصل إلى 90 مليون رمز Grok المزيف (Groks)，يتم إصدار هذه العملات المعدنية من خلال النقل متعدد الأطراف لمرة واحدة ، والتي قد تكون لإنشاء "هذا وهم رمزي يحمله المشاهير أيضًا". حذر بادون أيضًا من أن مثل هذه الأساليب الاحتيالية شائعة جدًا ، وأن Grok ليس لديه رموز رسمية على الإطلاق ، وليس هناك خطة لإصدار عملات معدنية. تحذير تويت Payun من Tide Tide Tide Grok Scam ظهرت عملات Grok المزيفة في عام 2023 ، وتم قتل تصويت من الناس في وقت مبكر من عام 2023 ، أصدرت مجموعة احتيال رمز ERC-20 تسمى Grok على Ethereum. بعد جذب المستثمرين لدخول السوق ، باعت على الفور 0.5 ٪ من إجمالي العرض ، وانخفض سعر العملة بنسبة 90 ٪ ، مما ضرب مستثمري التجزئة بشدة. هذه المرة بدا أنه يحدث مرة أخرى. يستخدم المسك مرة أخرى! من عمليات الاحتيال المباشرة إلى فوضى العملات المعدنية وفق CoinsPeedrun تم إدراج بيانات تتبع البيانات ، مؤخرًا العديد من العملات المعدنية التي تم إصدارها في Musk على سلسلة BNB واحدة تلو الأخرى. بالإضافة إلى ذلك ، هناك أيضًا "عي إيلون موسك لايف"النشاط ، الذي كذب على أنه سيرسل 20،000 دولار من العملة المشفرة ، تم الكشف عنه من قبل مستشار الأمن دينيس توماس ، كان هجومًا على التصيد. أصبحت الشركات المعروفة مثل Meta و Coinbase أهدافًا أيضًا ليس فقط المسك ، ولكن أيضا رجال الأعمال المعروفين أصبحوا أهدافًا. وفق Mailsuite وفقًا للتقرير ، تم استخدام Meta ، العلامة التجارية التي تم انتحالها الأكثر انتحارًا في عام 2024 ، في هجمات التصيد 25 أضعاف هجمات Coinbase المعروفة ، والتي تعد منصة التداول الأكثر انتحارًا في صناعة التشفير. تظهر عمليات الاحتيال في المحفظة في تيار لا نهاية له ، وتجاوزت الخسائر 1 مليار دولار أمريكي في عام 2024 بالإضافة إلى العملة المزيفة ، يتضمن هذا النوع من الاحتيال أيضًا أنواعًا جديدة من تقنيات التصيد مثل التسمم بالعناوين ، والتي تحفز المستخدمين على وجه التحديد على نقل العملات المشفرة إلى عناوين كاذبة. وفقًا للإحصاءات الصادرة عن Certik ، كان هناك ما يقرب من 300 حالة احتيال في التصيد في عام 2024 ، مما أدى إلى خسائر بقيمة مليار دولار أمريكي. وفقًا لـ Certik ، تسببت ما يقرب من 300 حالة احتيال في عام 2024 في خسائر مليار دولار أمريكي. لا تحكب عندما ترى العملة الجديدة. يرجى تأكيد ما إذا كان حقيقيًا أولاً. على الرغم من أن Musk موضعي إلى حد كبير ، فإن Grok هو chatbot من الذكاء الاصطناع�� على Twitter (X) ، إلا أن المسؤول لم يصدر عملات معدنية ، ولم يخطط لإصدار عملات معدنية. إذا رأيت شخصًا ينقل العملات المعدنية إلى المشاهير أو العملات المعدنية مع أسماء الذكاء الاصطناعي والمسك ، فلا تحاك ومهيجة. يرجى تأكيد ما إذا كان هذا صحيحًا أولاً. تحذير المخاطراستثمارات العملة المشفرة محفوفة بالمخاطر للغاية ، وقد تتقلب أسعارها بشكل كبير وقد تفقد كل مديرك. يرجى تقييم المخاطر بحذر.

[fabiopempy]

Security Breach Hits R0AR Staking Contract, $790K In ETH Drained Via Malicious Exploit

Blockchain security firm PeckShield reported that the staking contract of decentralized finance (DeFi) platform R0AR was compromised, resulting in the loss of approximately 493.7 ETH—valued at around $790,000 at the time of the incident. According to Web3 security provider Cyvers, the attacker deployed a malicious contract a day before the exploit occurred. By depositing a minimal amount—

Read More: You won't believe what happens next... Click here!

[theccpress]

KiloEX Halts Operations After $7.5 Million Exploit

Grab your popcorn, folks! 🍿 The KiloEX rollercoaster just hit a major snag as it suspends operations to trace $7.5 million (yep, you read that right) stolen in a significant exploit. Think your investments are safe? Think again! 💸

KiloEX Halts Operations After $7.5 Million Exploit

Key Points:

KiloEX exploit causes significant financial disruption.

Platform suspends operations to recover funds.

Community and investor trust substantially impacted.

As KiloEX scrambles to recover the misappropriated funds, one can't help but raise an eyebrow at the sheer vulnerability of decentralized exchanges. Are your crypto assets sitting comfortably in a digital vault or a ticking time bomb? 💣 With a nod from Binance Labs, KiloEX experienced a delightful little hiccup due to a price oracle vulnerability, and now they've called in the cavalry from security firms to save the day.

“The exploit was due to a price oracle vulnerability, noting its simplicity and ease of exploitation.” — PeckShield, Cybersecurity Firm

Uh-oh! The native KILO token didn’t get the memo about stability, plummeting 30% and dragging its market cap down to a dismal $7.5 million. 🪂 On top of that, liquidity issues have started popping up like unsightly pimples across networks like Base and Taiko, meaning everybody's favorite stablecoin, USDC, isn’t looking so stable anymore.

🧨

Buckle up—this incident highlights the glaring need for stronger security frameworks in DeFi platforms. While everyone’s waiting for regulatory champs to swoop in, just remember: similar hacks have led to liquidity nightmares before. In Q1 2025 alone, DeFi protocols suffered a whopping $106.8 million in losses. 😱

🚨

As for KiloEX, they’ve pledged to deliver a super transparent report (because who doesn’t love a good transparency episode?) to regain user trust. Time to see how they prioritize integrity and enhance cybersecurity measures.

🔍

If you want to dive deeper into this spicy situation, check out the full details here! And while you’re at it, share your thoughts in the comments below. 💬 Let's discuss what this means for the future of crypto investment!

#KiloEX #CryptoNews #DeFi #Blockchain #InvestSmart #SecurityFirst #CryptoCommunity #KILOToken #PriceOracle #LiquidityCrisis #Investing

[balkikhalnews]

Crypto hacks top $1.6B in Q1 2025 — PeckShield

Hackers stole more than $1.63 billion in cryptocurrency during the first quarter of 2025, with the Bybit exploit accounting for more than 92% of total losses, according to blockchain security firm PeckShield. PeckShield reported that over $87 million in crypto was lost to hacks in January, while February saw a dramatic spike to $1.53 billion, largely due to the Bybit attack. That incident was one…

[obavee]

The Truth About Rug Pulls in Crypto and How You Can Protect Your Investments

When I first started in crypto, it was a whirlwind of excitement and fear. New opportunities were popping up left and right, and I couldn’t resist the allure of high returns. There was just one problem: I had no idea what I was doing.

Like so many others, I got swept up in the hype of a "hot new token." The marketing was slick, the community was vibrant, and everyone seemed to be making money. So, naturally, I dove in—without really understanding the risks.

Then, one day, I woke up to find the project had completely vanished. The website was down. The Telegram group had been deleted. And worst of all, my investment? Gone.

It was my first encounter with a rug pull.

That’s when I realized—just like the Wild West, the crypto world has its dangers. Rug pulls are one of the most dangerous risks in the space, and I was lucky enough to learn the hard way early on. But I didn't want to make the same mistake again. So, I set out on a mission to learn everything I could to protect myself—and eventually, help others avoid the same pitfalls.

What Is a Rug Pull

In its simplest form, a rug pull occurs when developers of a cryptocurrency or decentralized project suddenly withdraw their liquidity, leaving investors with worthless tokens. This often happens after the developers pump up the price and get enough people to invest, only to disappear with the funds.

Rug pulls are a growing issue in the crypto space. It’s easy to get caught up in the hype, and sometimes, it’s difficult to tell the difference between a legitimate project and a scam. But the key to surviving in this space is learning how to spot the warning signs—and knowing what to do when you see them.

How Rug Pulls Work: A Step-by-Step Breakdown

The tactics used in rug pulls are pretty straightforward, but that doesn’t make them any less dangerous. Here’s how it usually plays out:

1. The Hype Phase

The project seems too good to be true. Beautifully designed websites, flashy whitepapers, and promises of huge returns on investments. Developers use aggressive marketing to build up anticipation, making the project appear like a can't-miss opportunity.

2. The Price Surge

Investors start pouring in. As liquidity builds, the token price starts to rise. The project team may encourage people to hold on for even higher returns. In the meantime, the developers are quietly lining their pockets with as much liquidity as they can.

3. The Exit

The developers make their move. They pull the liquidity, and in an instant, the price crashes to zero. Investors are left holding worthless tokens. The project's website and social media channels disappear, and it’s as though the project never existed.

It’s a brutal cycle that plays out again and again in the crypto world—but it doesn’t have to be inevitable.

How to Avoid Getting Caught in a Rug Pull

I wish I could say there’s a foolproof way to avoid rug pulls. But the truth is, scams can be sneaky. Still, there are strategies you can use to protect your investment:

1. Look for Locked Liquidity

One of the most important things to check is whether or not the liquidity is locked. This means that the developers can’t pull out the liquidity at will. If you see a project without liquidity lockup or with a very short lockup period, that’s a huge red flag.

2. Study Token Distribution

In most rug pulls, a small number of wallets hold a disproportionate amount of tokens. If you find that the majority of the supply is in the hands of just a few wallets, it’s best to be cautious. These wallets can dump their tokens anytime and crash the price.

3. Verify Smart Contracts

Smart contracts are the backbone of decentralized finance. If a project’s contract hasn’t been audited by a reputable firm, it could be hiding serious vulnerabilities. Always check for an audit from a trusted firm like CertiK, PeckShield, or Hacken before making any investment.

4. Check for Real Utility

If the project is all about promises of quick returns with little explanation of how it works, then it’s likely too good to be true. Successful projects focus on providing real utility—whether that’s through a working product, meaningful partnerships, or a unique value proposition.

5. Analyze the Team

Who are the developers behind the project? Are they transparent about their identities? If the team is anonymous or has no verifiable history in crypto, it’s a huge red flag. A trustworthy team will be open about who they are and will interact with the community.

How I Found a Safe Haven in STON.fi

After getting burned by scams, I was determined to find a platform I could trust. And that’s when I discovered STON.fi, a decentralized exchange (DEX) built on The Open Network (TON) blockchain.

What stood out to me about STON.fi was its commitment to transparency and security. It doesn’t rely on flashy promises or unsustainable hype. Instead, it focuses on real utility and long-term growth. Here’s why I believe STON.fi offers a safe haven in a risky market:

1. Security First

STON.fi uses immutable smart contracts and TON’s advanced blockchain architecture to ensure that liquidity and assets are secure. Liquidity is locked, so there’s no risk of sudden withdrawals that can lead to a rug pull. It’s built for long-term sustainability, not quick profits.

2. Transparency

One of the most important things I look for in a project is transparency. STON.fi is fully open-source and its smart contracts are audited by reputable firms. Everything is out in the open, and there are no secrets. You can verify everything for yourself.

3. No Middlemen

STON.fi eliminates the risk of insider manipulation by being a fully decentralized platform. This means there are no third parties controlling the flow of liquidity, and no one can pull the rug out from under you.

4. Real Earning Opportunities

STON.fi isn’t about sky-high promises of returns—it’s about offering real DeFi mechanics that let users earn yield through market activity, not artificial hype. Whether you’re swapping tokens or participating in farm pools, the returns are based on the actual trading volume and liquidity.

5. Continuous Development

Unlike many projects that vanish after a short time, STON.fi is continuously improving. New features, updates, and partnerships keep coming, ensuring the platform evolves with the times. They don’t rest on their laurels—they’re always looking for ways to make the platform safer and more rewarding.

Final Thoughts: Crypto Doesn’t Have to Be Dangerous

It’s easy to get caught up in the excitement of a new project, especially in the fast-paced world of crypto. But as I’ve learned the hard way, jumping in without doing your homework can lead to painful losses.

I’ve seen it firsthand—too many people losing their money because they didn’t spot the red flags in time. But it doesn’t have to be this way. With the right knowledge, the right platform, and the right mindset, you can navigate the crypto space safely.

STON.fi isn’t just another platform—it’s a place where you can invest with confidence, knowing that the project is built with your security in mind. By focusing on transparency, security, and real utility, it offers a safe alternative in a market full of risks.

As you continue your crypto journey, remember this: Knowledge is your best weapon. Don’t let the fear of missing out drive your decisions—do your research, spot the scams, and always invest in projects that are built to last.

[zero2046-blog]

Abracadabra攻击者将3000枚ETH转移到Tornaodcash

深潮 TechFlow 消息，6 月 19 日，据PeckShield监测，Abracadabra攻击者将3000枚ETH转移到Tornaodcash，价值约760万美元。 此前消息，Abracadabra 在今年 3 月初的一次攻击中损失了 1300 万美元。

[emmygreat]

How I Learned to Protect My Crypto from Rug Pulls—And Why STON.fi is My Safe Haven

The first time I witnessed a rug pull, it wasn’t just a headline or a distant story—it was real. A friend, eager to capitalize on the latest DeFi farming opportunity, went all in on a promising new project. The marketing was sleek, the community was buzzing, and the returns? Insanely high. It felt like the perfect play.

Then, in an instant, everything disappeared. The website? Gone. The Telegram group? Deleted. The developers? Nowhere to be found. His funds? Completely drained.

It was a painful lesson. And it made me realize that in the wild west of crypto, if you don’t know how to protect yourself, you will get burned.

Understanding Rug Pulls: The Trap That Catches Many

A rug pull is one of the most common scams in crypto. It happens when the creators of a token or DeFi platform lure investors in, pump up the price or liquidity, and then suddenly drain the funds, leaving traders with worthless tokens.

Rug pulls take different forms, but they usually follow the same playbook:

1. The Hype Phase – A new project appears with a slick website, aggressive marketing, and a growing community. Promises of high returns lure investors in.

2. The Price Surge – As more people invest, the token price soars. Developers encourage holders to "HODL" while adding liquidity to boost confidence.

3. The Exit – Once enough money is locked into the liquidity pool, the developers withdraw everything, making the token worthless.

For the unprepared, it's devastating. But it’s not unavoidable.

How to Spot and Avoid Rug Pulls

After seeing too many people lose money, I made it a rule to vet every project I invest in. Here’s what I look for:

1. Liquidity Locking

If the liquidity isn't locked, that’s a massive red flag. Reputable projects lock liquidity for a certain period to prevent sudden withdrawals. If there’s no liquidity lock—or it’s only locked for a few days—run.

2. Token Distribution

If a few wallets hold most of the supply, you’re at risk. Developers can dump their tokens at any time, crashing the price. Always check the tokenomics and distribution before investing.

3. Smart Contract Audits

A serious project will have an audit from a reputable firm like CertiK, PeckShield, or Hacken. But don’t just take their word for it—read the audit reports. Some scams still get audits, but the reports often highlight vulnerabilities.

4. Real Utility Over Hype

If the only selling point of a project is "high APY" or "fast gains," it's a trap. A solid project has a real product, a clear use case, and long-term sustainability.

5. Community and Transparency

Do the developers interact with their community? Do they hold AMAs? If everything feels anonymous and controlled, it's another sign of trouble.

Why I Trust STON.fi in a Market Full of Risks

After seeing countless scams, I needed a platform that actually valued security, transparency, and real utility. That’s how I found STON.fi, a decentralized exchange built on The Open Network (TON) blockchain.

Here’s why STON.fi stands out in an industry full of risks:

1. Liquidity Security

STON.fi ensures that liquidity is safe by using immutable smart contracts and TON’s robust blockchain architecture. This means that no one— not even the developers—can suddenly drain liquidity.

2. No Middlemen, No Fake Promises

Unlike centralized exchanges or shady DeFi projects, STON.fi operates with pure decentralization. Trades are executed peer-to-peer, eliminating the risk of insider manipulation.

3. Smart Contract Transparency

STON.fi’s smart contracts are fully open-source and audited, ensuring users can verify the security and legitimacy of the platform.

4. Sustainable Growth, Not Ponzi Models

Many platforms lure users in with unrealistic APYs—but those numbers are often unsustainable. STON.fi focuses on real DeFi mechanics, allowing traders to earn yield through actual market activity, not artificial inflation.

5. Designed for Traders, Built for Safety

With features like:

Fair pool mechanics that prevent price manipulation

Real-time analytics to track token liquidity and volume

Efficient routing for the best swap rates

STON.fi gives traders an environment where they can invest confidently without worrying about the next rug pull.

Final Thoughts

Crypto is full of opportunities, but it’s also full of traps. If you're not careful, you’ll fall into one. I learned my lesson the hard way, but platforms like STON.fi have shown me that DeFi can be safe when built with the right principles.

The next time you’re about to ape into a new project, ask yourself: Is this secure, or am I just following hype? Because in crypto, the difference between wealth and ruin is often just one decision away.

[buzzleaktv]

GMX Defends Contracts After $13 Million Loss Tied to Abracadabra's Cauldron Exploit

Prominent blockchain security firm PeckShield reported an exploit involving the GMX decentralized exchange (DEX), which has brought attention to vulnerabilities within the Abracadabra (Spell) ecosystem. The incident, tied to Abracadabra’s cauldrons – smart contracts that facilitate DeFi operations like lending, borrowing, and liquidity provision – led to the theft of approximately 6,260 Ethereum,…

[cryptotokenmedia]

PolyNetwork Suspected Hacking

According to on-chain data analytics and security company PeckShield Inc., PolyNetwork is suspected to have been hacked. Hackers have released massive additional assets on several chains: As of now, there has yet to be a response from the project side. Poly Network is a project that provides a cross-chain solution allowing blockchains to interact and build infrastructure for Web3. One of Poly…

[thecryptonewshub]

Four.Meme Suffers Malicious Attack Resulting in $183K Loss

Understanding the Impact of the Four.Meme Malicious Attack and What it Means for Users In a shocking turn of events, Four.Meme, a Binance Smart Chain-based memecoin platform, fell victim to a malicious attack that led to a significant loss of $183K. The attack has raised concerns within the crypto community, as the platform was forced to temporarily suspend its token liquidity pool on PancakeSwap to mitigate further damage. Although Four.Meme has assured its users that internal funds remain safe and unaffected, the attack highlights the vulnerabilities even memecoin platforms face in today's volatile blockchain environment.

For those unfamiliar, Four.Meme is a platform meant to launch numerous meme coins, capitalising on the meme coin frenzy that has swept the crypto world. The $183K loss is a significant setback for the project, and the decision to suspend token liquidity on PancakeSwap was a necessary precaution to protect both the platform and its consumers. Also Read:   how-the-eu-ai-act-impacts-startups-and-small-businesses-a-double-edged-sword The malicious attempt, detected by blockchain security firm PeckShield, targeted the platform's liquidity pool, which is a critical aspect of any decentralised exchange (DEX). The liquidity pool on PancakeSwap enables users to exchange tokens in a decentralised way, eliminating the need for a centralised authority. The loss of assets caused by such an attack not only damages the token's liquidity but also shakes users' faith, particularly in meme coins, which are highly speculative and volatile. While the specifics of the attack are still being investigated, it serves as a wake-up call to the cryptocurrency community. Despite blockchain's decentralised nature, unscrupulous actors can still exploit weaknesses, particularly in inadequately secured liquidity pools and platform infrastructures. Despite the attack, Four.Meme has pledged to tighten its security measures to avoid similar events in the future. This includes strengthening the security of their smart contracts and liquidity pools to protect their user base. The organisation also assured customers that they will collaborate closely with blockchain security specialists to track down the source of the assault and retrieve lost money whenever possible. The episode serves as a sharp reminder of the inherent risks of investing in cryptocurrencies, particularly memecoins, which frequently lack the inspection and security of more known coins. To avoid being a victim of similar scams, cryptocurrency investors should constantly be vigilant and aware about the sites they use. For the time being, Four.Meme is focusing on restoring the platform's functionality and ensuring its users that no further breaches are expected in the near future. As the platform recovers, it is anticipated to establish stronger security mechanisms to restore trust in its community and safeguard future investments. Read the full article

[ckm9s]

加密世界中的诈骗陷阱

近年來，隨著加密貨幣市場的發展，詐騙手法也層出不窮。其中，「質押空投詐騙」成為不少投資者上當受騙的常見手段。這種詐騙方式通常利用用戶對免費代幣或高額收益的渴望，誘導其將資金存入惡意合約或授予不當的權限，最終導致資產被盜。

為了保護自己的資產，本文將介紹質押空投詐騙的常見手法，以及如何有效防範這類風險。

來自暗網的專業駭客團隊 Telegram：@HackM9

1. 質押空投詐騙的常見手法

（1）假空投連結

詐騙者會在社群媒體（如 Twitter、Discord、Telegram）上發布聲稱官方組織的空投活動，並附帶釣魚網站連結。一旦點擊並連接錢包，惡意網站可能會要求授權存取權限，從而導致資產被盜。

（2）惡意智能合約

部分詐騙項目要求用戶將加密貨幣質押到智能合約，聲稱會在一段時間後發放空投或高額利息。但這些合約往往包含後門，允許詐騙者隨時提取資金或永久鎖定用戶存款。

（3）假冒官方帳號

詐騙者會偽裝成官方社群管理員或知名人士，��動聯繫用戶，宣稱可以幫助獲得空投，並引導至釣魚網站或惡意 DApp（去中心化應用）。

（4）空投偽裝成釣魚授權

部分詐騙者會直接向用戶錢包發送不明代幣，並在區塊鏈瀏覽器（如 Etherscan）中嵌入假網站。一旦用戶點擊兌換或授權交易，可能會無意中批准惡意智能合約，導致資產損失。

2. 如何防範質押空投詐騙？

✅ 核實官方來源

參加空投前，務必確認活動是否來自官方網站或社群。

使用官方渠道（如官網、官方 Twitter、Discord）查證信息，避免透過不明鏈接參與活動。

✅ 避免點擊不明連結

若在社群或私信中收到空投連結，不要輕易點擊，可先使用 VirusTotal 或 Google Safe Browsing 檢測該網站是否安全。

✅ 謹慎授權錢包權限

在連接任何網站或智能合約時，仔細檢查所請求的權限。

使用 Revoke.cash 或 Etherscan Token Approval 定期檢查並撤銷不必要的合約授權。

✅ 警惕「免費」陷阱

若空投要求質押大量資產或支付高額手續費才能領取，極有可能是詐騙。

合法的空投通常不會要求事先支付費用。

✅ 使用硬體錢包存儲大額資產

硬體錢包（如 Ledger、Trezor）能有效隔離私鑰，提高安全性，避免惡意網站直接竊取資產。

✅ 多方驗證代幣真偽

透過 CoinGecko 或 CoinMarketCap 查詢代幣的合約地址，確認是否與官方一致。

在區塊鏈瀏覽器中查看代幣持有者數量，若發現大量空投至隨機地址，則可能是釣魚代幣。

3. 遇到詐騙如何處理？

如果發現自己疑似遭遇質押空投詐騙，可以採取以下措施：

立即撤銷授權：使用 Revoke.cash 或 Etherscan 的 Token Approvals 工具撤銷授權，以防進一步資產損失。

提高帳戶安全性：更換密碼、啟用 2FA（雙重身份驗證）保護交易所帳戶。

通報社群與官方：在官方社群報告詐騙案例，提醒其他用戶避免受害。

尋求專業幫助：如涉及大額損失，可聯繫區塊鏈安全機構（如 SlowMist、PeckShield）請求協助追蹤資金流向。

結論

質押空投詐騙雖然層出不窮，但只要保持警惕，做好安全防護，就能大幅降低受騙風險。記住：「天上不會掉餡餅」，遇到過於誘人的空投活動時，務必先進行詳盡的驗證，確保自身資產安全。