• bitcoinBitcoin (BTC) $ 95,452.00
  • ethereumEthereum (ETH) $ 3,619.14
  • xrpXRP (XRP) $ 2.63
  • tetherTether (USDT) $ 0.999443
  • solanaSolana (SOL) $ 226.78
  • bnbBNB (BNB) $ 650.40
  • dogecoinDogecoin (DOGE) $ 0.416534
  • cardanoCardano (ADA) $ 1.27
  • usd-coinUSDC (USDC) $ 0.999393
  • staked-etherLido Staked Ether (STETH) $ 3,610.67
  • avalanche-2Avalanche (AVAX) $ 50.78
  • tronTRON (TRX) $ 0.229040
  • shiba-inuShiba Inu (SHIB) $ 0.000030
  • the-open-networkToncoin (TON) $ 6.67
  • stellarStellar (XLM) $ 0.535620
  • chainlinkChainlink (LINK) $ 25.31
  • wrapped-stethWrapped stETH (WSTETH) $ 4,287.93
  • polkadotPolkadot (DOT) $ 9.91
  • hedera-hashgraphHedera (HBAR) $ 0.343477
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 95,251.00
  • bitcoin-cashBitcoin Cash (BCH) $ 534.19
  • suiSui (SUI) $ 3.60
  • wethWETH (WETH) $ 3,620.24
  • litecoinLitecoin (LTC) $ 130.31
  • nearNEAR Protocol (NEAR) $ 7.30
  • pepePepe (PEPE) $ 0.000021
  • uniswapUniswap (UNI) $ 13.99
  • leo-tokenLEO Token (LEO) $ 8.75
  • aptosAptos (APT) $ 14.15
  • wrapped-eethWrapped eETH (WEETH) $ 3,807.35
  • internet-computerInternet Computer (ICP) $ 13.95
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.723270
  • crypto-com-chainCronos (CRO) $ 0.202373
  • usdsUSDS (USDS) $ 0.995462
  • vechainVeChain (VET) $ 0.064291
  • ethereum-classicEthereum Classic (ETC) $ 33.45
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 1.87
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • render-tokenRender (RENDER) $ 9.01
  • algorandAlgorand (ALGO) $ 0.553258
  • bittensorBittensor (TAO) $ 614.23
  • filecoinFilecoin (FIL) $ 7.28
  • arbitrumArbitrum (ARB) $ 1.06
  • kaspaKaspa (KAS) $ 0.156141
  • cosmosCosmos Hub (ATOM) $ 9.73
  • blockstackStacks (STX) $ 2.40
  • daiDai (DAI) $ 0.999255
  • fantomFantom (FTM) $ 1.27
  • immutable-xImmutable (IMX) $ 2.06
  • aaveAave (AAVE) $ 231.87
  • celestiaCelestia (TIA) $ 7.90
  • whitebitWhiteBIT Coin (WBT) $ 23.27
  • mantra-daoMANTRA (OM) $ 3.60
  • okbOKB (OKB) $ 54.25
  • bonkBonk (BONK) $ 0.000043
  • dogwifcoindogwifhat (WIF) $ 3.22
  • optimismOptimism (OP) $ 2.54
  • injective-protocolInjective (INJ) $ 32.49
  • moneroMonero (XMR) $ 171.71
  • hyperliquidHyperliquid (HYPE) $ 9.24
  • mantleMantle (MNT) $ 0.907764
  • the-graphThe Graph (GRT) $ 0.304238
  • theta-tokenTheta Network (THETA) $ 2.83
  • sei-networkSei (SEI) $ 0.666145
  • ondo-financeOndo (ONDO) $ 1.71
  • ethenaEthena (ENA) $ 0.829830
  • worldcoin-wldWorldcoin (WLD) $ 3.32
  • thorchainTHORChain (RUNE) $ 6.52
  • bitget-tokenBitget Token (BGB) $ 1.59
  • flokiFLOKI (FLOKI) $ 0.000228
  • binance-peg-wethBinance-Peg WETH (WETH) $ 3,621.19
  • galaGALA (GALA) $ 0.051667
  • kaiaKaia (KAIA) $ 0.361613
  • pyth-networkPyth Network (PYTH) $ 0.536000
  • based-brettBrett (BRETT) $ 0.194176
  • makerMaker (MKR) $ 2,174.08
  • the-sandboxThe Sandbox (SAND) $ 0.785209
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.997371
  • jasmycoinJasmyCoin (JASMY) $ 0.039381
  • rocket-pool-ethRocket Pool ETH (RETH) $ 4,047.80
  • flare-networksFlare (FLR) $ 0.034749
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 95,477.00
  • stauSTAU (STAU) $ 0.179585
  • arweaveArweave (AR) $ 26.77
  • flowFlow (FLOW) $ 1.12
  • iotaIOTA (IOTA) $ 0.489008
  • eosEOS (EOS) $ 1.13
  • mantle-staked-etherMantle Staked Ether (METH) $ 3,802.66
  • lido-daoLido DAO (LDO) $ 1.87
  • tezosTezos (XTZ) $ 1.62
  • starknetStarknet (STRK) $ 0.714139
  • jupiter-exchange-solanaJupiter (JUP) $ 1.20
  • matic-networkPolygon (MATIC) $ 0.726018
  • beam-2Beam (BEAM) $ 0.029499
  • kucoin-sharesKuCoin (KCS) $ 12.58
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 3,721.01
  • heliumHelium (HNT) $ 8.65
  • raydiumRaydium (RAY) $ 5.12
  • solv-btcSolv Protocol SolvBTC (SOLVBTC) $ 95,111.00
  • axie-infinityAxie Infinity (AXS) $ 9.27
  • bitcoin-svBitcoin SV (BSV) $ 73.68
  • virtual-protocolVirtuals Protocol (VIRTUAL) $ 1.44
  • gatechain-tokenGate (GT) $ 11.49
  • bittorrentBitTorrent (BTT) $ 0.000001
  • coredaoorgCore (CORE) $ 1.52
  • neoNEO (NEO) $ 19.55
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 3,729.66
  • ethereum-name-serviceEthereum Name Service (ENS) $ 40.90
  • elrond-erd-2MultiversX (EGLD) $ 48.75
  • decentralandDecentraland (MANA) $ 0.701786
  • peanut-the-squirrelPeanut the Squirrel (PNUT) $ 1.28
  • dydx-chaindYdX (DYDX) $ 1.80
  • popcatPopcat (POPCAT) $ 1.28
  • aioz-networkAIOZ Network (AIOZ) $ 1.11
  • apecoinApeCoin (APE) $ 1.65
  • msolMarinade Staked SOL (MSOL) $ 281.56
  • aerodrome-financeAerodrome Finance (AERO) $ 1.64
  • xdce-crowd-saleXDC Network (XDC) $ 0.077096
  • zcashZcash (ZEC) $ 72.90
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 3,619.66
  • tokenize-xchangeTokenize Xchange (TKX) $ 13.65
  • conflux-tokenConflux (CFX) $ 0.235335
  • chilizChiliz (CHZ) $ 0.117554
  • fasttokenFasttoken (FTN) $ 3.17
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 95,711.00
  • mina-protocolMina Protocol (MINA) $ 0.877089
  • binance-staked-solBinance Staked SOL (BNSOL) $ 231.11
  • akash-networkAkash Network (AKT) $ 4.15
  • ecasheCash (XEC) $ 0.000052
  • mantle-restaked-ethMantle Restaked ETH (CMETH) $ 3,799.11
  • solv-protocol-solvbtc-bbnSolv Protocol SolvBTC.BBN (SOLVBTC.BB) $ 94,527.00
  • pendlePendle (PENDLE) $ 5.91
  • curve-dao-tokenCurve DAO (CRV) $ 0.776046
  • wormholeWormhole (W) $ 0.346648
  • nexoNEXO (NEXO) $ 1.46
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 241.12
  • notcoinNotcoin (NOT) $ 0.009060
  • axelarAxelar (AXL) $ 1.08
  • pancakeswap-tokenPancakeSwap (CAKE) $ 3.21
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 95,130.00
  • ordinalsORDI (ORDI) $ 42.70
  • havvenSynthetix Network (SNX) $ 2.73
  • mog-coinMog Coin (MOG) $ 0.000002
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.418449
  • oasis-networkOasis (ROSE) $ 0.123566
  • cat-in-a-dogs-worldcat in a dogs world (MEW) $ 0.009350
  • dydxdYdX (ETHDYDX) $ 1.80
  • zksyncZKsync (ZK) $ 0.220716
  • roninRonin (RON) $ 2.19
  • grassGrass (GRASS) $ 3.26
  • blurBlur (BLUR) $ 0.387875
  • nervos-networkNervos Network (CKB) $ 0.017319
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000143
  • reserve-rights-tokenReserve Rights (RSR) $ 0.014984
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 3,618.96
  • compound-governance-tokenCompound (COMP) $ 86.86
  • neiro-3Neiro (NEIRO) $ 0.001783
  • usddUSDD (USDD) $ 0.997446
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 3,619.26
  • arkhamArkham (ARKM) $ 2.33
  • goatseus-maximusGoatseus Maximus (GOAT) $ 0.723721
  • kavaKava (KAVA) $ 0.660847
  • eigenlayerEigenlayer (EIGEN) $ 3.83
  • gnosisGnosis (GNO) $ 274.91
  • kusamaKusama (KSM) $ 44.35
  • layerzeroLayerZero (ZRO) $ 6.18
  • safeSafe (SAFE) $ 1.32
  • echelon-primeEchelon Prime (PRIME) $ 13.11
  • 1inch1inch (1INCH) $ 0.500128
  • superfarmSuperVerse (SUPER) $ 1.48
  • zilliqaZilliqa (ZIL) $ 0.034124
  • dashDash (DASH) $ 54.58
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 3,923.41
  • book-of-memeBOOK OF MEME (BOME) $ 0.009477
  • tether-goldTether Gold (XAUT) $ 2,643.95
  • dog-go-to-the-moon-runeDOG•GO•TO•THE•MOON (Runes) (DOG) $ 0.006487
  • fraxFrax (FRAX) $ 0.994314
  • moo-dengMoo Deng (MOODENG) $ 0.647543
  • holotokenHolo (HOT) $ 0.003580
  • astarAstar (ASTR) $ 0.084585
  • bitcoin-goldBitcoin Gold (BTG) $ 35.27
  • super-oethSuper OETH (SUPEROETHB) $ 3,627.12
  • amp-tokenAmp (AMP) $ 0.007514
  • enjincoinEnjin Coin (ENJ) $ 0.337810
  • stepnGMT (GMT) $ 0.235429
  • woo-networkWOO (WOO) $ 0.323460
  • theta-fuelTheta Fuel (TFUEL) $ 0.088377
  • bazaarsBazaars (BZR) $ 9.77
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000028
  • creditcoin-2Creditcoin (CTC) $ 1.45
  • livepeerLivepeer (LPT) $ 16.16
  • snekSnek (SNEK) $ 0.007914
  • iotexIoTeX (IOTX) $ 0.061772
  • qubic-networkQubic (QUBIC) $ 0.000005
  • apenftAPENFT (NFT) $ 0.00000058
  • dexeDeXe (DEXE) $ 10.01
  • dymensionDymension (DYM) $ 2.61
  • ether-fi-staked-btcEther.fi Staked BTC (EBTC) $ 95,219.00
  • 0x0x Protocol (ZRX) $ 0.659139
  • celoCelo (CELO) $ 1.00

Animation Tool Lottie Player Hit by Supply Chain Attack, Causes $723K Bitcoin Theft

0 10

Animation Tool Lottie Player Hit by Supply Chain Attack, Causes $723K Bitcoin Theft

  decrypt.co 31 October 2024 09:03, UTC

Animation Tool Lottie Player Hit by Supply Chain Attack, Causes $723K Bitcoin Theft

A major security breach has impacted multiple decentralized applications (dApps), with the attack stemming from malicious code injected into Lottie Player, a widely-used JavaScript animation library.

The attack exploited recent updates to Lottie Player’s npm package, specifically in versions 2.0.5 through 2.0.7, where hackers embedded malicious code within JSON files that display animations on websites.

At least one individual has lost 10 BTC (US$723,000) after unknowingly signing a phishing transaction linked to the breach, according to Scam Sniffer, a platform designed to protect users from online fraud.

Blockaid, a cybersecurity platform monitoring the incident, confirmed Wednesday the attackers deployed a fake wallet connection prompt, leading users to the drainer malware «Ace Drainer,» which mimics legitimate connections to deceive users.

According to Blockaid, the hackers added harmful code into Lottie Player’s files, turning these animations into entry points for potential scams. Essentially, when users visited sites with this compromised library, they were shown fake pop-ups asking them to connect their digital wallets.

However, these prompts were controlled by hackers and could grant them unauthorized access to users’ funds.

In response to the attack, LottieFiles’ vice president of engineering, Jawish Hameed, confirmed Wednesday that affected versions were removed from npm, and a safe version (2.0.8) was released.

LottieFiles pointed Decrypt to its public statement regarding the breakdown of events when asked for comment.

Hameed noted the breach involved the GitHub account of a senior engineer, through which attackers pushed three compromised updates in just three hours on Tuesday.

LottieFiles has since revoked all access from the affected developer account and taken further steps to prevent future incidents.

This type of “supply chain attack”—where hackers infiltrate widely-used software that many websites rely on—can have widespread consequences. In this case, the compromised Lottie Player versions were automatically pulled into many sites, making it easier for hackers to reach users.

Decentralized aggregator platform 1inch, one of the main targets of the attack, reassured users on social media that only its web dApp was affected and that the wallet app and core protocols remain secure.

Security compromises in widely used libraries and tools have become a critical issue as hackers exploit vulnerabilities that allow them access to unsuspecting users’ assets.

Earlier this month, a PEPE token holder lost $1.39 million after unknowingly signing a malicious Permit2 transaction.

Edited by Sebastian Sinclair

Source

Leave A Reply

Your email address will not be published.