3546 matches found
CVE-2025-52294
Insufficient validation of the screen lock mechanism in Trust Wallet v8.45 allows physically proximate attackers to bypass the lock screen and view the wallet balance...
PT-2025-27570 · Unknown · Trust Wallet
Name of the Vulnerable Software and Affected Versions: Trust Wallet version 8.45 Description: The issue is related to insufficient validation of the screen lock mechanism, allowing physically proximate attackers to bypass the lock screen and view the wallet balance. Recommendations: For Trust...
CVE-2025-52294
Trust Wallet v8.45 is vulnerable to an improper authentication flaw (CWE-287) due to insufficient validation of the screen lock mechanism . This allows physically proximate attackers to bypass the lock screen and view the wallet balance . While a proof-of-concept has been published, no direct lin...
Trust Wallet 安全漏洞
Trust Wallet is a cryptocurrency wallet from Trust Wallet, Inc. A security vulnerability exists in Trust Wallet version v8.45, which stems from insufficient validation of the screen locking mechanism and could lead to bypassing the lock screen to view the wallet balance...
CVE-2025-52294: Improper Authentication
Insufficient validation of the screen lock mechanism in Trust Wallet v8.45 allows physically proximate attackers to bypass the lock screen and view the wallet balance...
@akhmetovdev/ledger-connector (>=1.1.0, <=1.3.4), @ardenthq/sdk-btc (>=1.0.0, <=1.3.1) +184 more potentially affected by CVE-2024-49365 via tiny-secp256k1 (>=1.0.0, <=1.1.6)
tiny-secp256k1 NPM version =1.0.0, =1.1.0, =1.0.0, =0.0.0-CP-8940-20240801175729, =0.20.0-alpha.10, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-9420-20250129154656, =0.0.0-CP-9420-20250129154656...
CVE-2025-5937: Cross-Site Request Forgery (CSRF)
The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the adminOptions function. This makes it...
Scammers Use Inferno Drainer to Steal $43K from CoinMarketCap Users
Scammers used Inferno Drainer to steal $43,000 in crypto from 110 CoinMarketCap users through a fake wallet prompt embedded in the site’s front-end...
Secure User-Friendly Blockchain Modular Wallet Design Using Android and OP-TEE
Emerging crypto economies still hemorrhage digital assets because legacy wallets leak private keys at almost every layer of the software stack, from user-space libraries to kernel memory dumps. This paper solves that twin crisis of security and interoperability by re-imagining key management as a...
Banana Squad Hides Data-Stealing Malware in Fake GitHub Repositories
Banana Squad hid data-stealing malware in fake GitHub repos posing as Python tools, tricking users and targeting sensitive info like browser and wallet data...
Malicious code in dynamic-global-wallet (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5394 Malicious code in dynamic-global-wallet (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5456 Malicious code in rif-wallet-services (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in rif-wallet-services (npm)
The package communicates with a domain associated with malicious activity...
Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets
A new malware campaign is exploiting a weakness in Discord's invitation system to deliver an information stealer called Skuld and the AsyncRAT remote access trojan. "Attackers hijacked the links through vanity link registration, allowing them to silently redirect users from trusted sources to...
Malicious code in zora-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2764c900ca7254d541cb02d4393365a610648e80866768703dcae298b4f3a4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zora-wallet-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4947 Malicious code in zora-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2764c900ca7254d541cb02d4393365a610648e80866768703dcae298b4f3a4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4948 Malicious code in zora-wallet-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
