MAL-2023-133 Malicious code in binance-prices (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4342ae24f59df91323155ce0522347b014b90b17d911aece62534aa4975cc006 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency

A recent malware campaign has been found to leverage Satacom downloader as a conduit to deploy stealthy malware capable of siphoning cryptocurrency using a rogue extension for Chromium-based browsers. "The main purpose of the malware that is dropped by the Satacom downloader is to steal BTC from...

Wrong blocksPerYear calculation in WhitePaperInterestRateModel.sol

Lines of code Vulnerability details Impact In WhitePaperInterestRateModel.sol, File: contracts/WhitePaperInterestRateModel.sol 17 uint256 public constant blocksPerYear = 2102400; There is wrong calculation of blocksPerYear and blocksPerYear is the approximate number of blocks per year that is...

[H1] Incorrect constant set at WhitePaperInterestRateModel

Lines of code Vulnerability details Impact Incorrect calculation of critical parameters like baseRatePerBlock. Proof of Concept The constant blocksPerYear is incorrectly set uint256 public constant blocksPerYear = 2102400; // @audit 15 seconds per block However, for Binance Smart Chain the blocks...

Wrong WhitePaperInterestRateModel block per year calculations incur losses for users and the protocol

Lines of code Vulnerability details Vulnerability Details Blocks per year calculations in WhitePaperInterestRateModel improperly assume 15 seconds block time, while on Binance Smart Chain it’s 3 seconds. This has grave consequences, because it is used in calculating borrower’s interest rate and...

Norway Seizes $5.84 Million in Cryptocurrency Stolen by Lazarus Hackers

Norwegian police agency Økokrim has announced the seizure of 60 million NOK about $5.84 million worth of cryptocurrency stolen by the Lazarus Group in March 2022 following the Axie Infinity Ronin Bridge hack. "This case shows that we also have a great capacity to follow the money on the blockchai...

Malicious code in ypthon-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f666c7f6fb138b62f3adf3f80b8f06547c71b2d41b1bced7ec1fc28f7f065d4d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2103 Malicious code in pythno-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dacedec4b2a59a2a4d868abd54d298f67cfcf907235ff7969a13b4356078b674 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1965 Malicious code in ppython-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 118d96c18538a5cd4625937632e7a731e670388133a33e6af18db807b8b3da19 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pythoon-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 47e329331bbcfb0720f559117f61cf30b466f45f6795232ec020a7e9a4bbc20c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2126 Malicious code in pythoon-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 47e329331bbcfb0720f559117f61cf30b466f45f6795232ec020a7e9a4bbc20c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2117 Malicious code in python-binannce (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 598a5676322f0a5625cec11d079811a6dac5c677e030289256210693cd0a7256 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pythhon-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 53f31c880d1d356da9a323e2abe59ae3456e77cd8fdf297db3187cd3f441de6b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pytho-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4d76290138f9eb2912f506aa108efb5e70077d29a2388d3d4437da71f150dd8b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2066 Malicious code in pyhon-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ea3fa724851d4845a028a5ab7e0b5ee8318f5608ec039634086f6a402203e0f8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2104 Malicious code in pytho-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4d76290138f9eb2912f506aa108efb5e70077d29a2388d3d4437da71f150dd8b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ptyhon-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2c597bf070cc4aca68c2ad7549a718aef6d02eef4ac5b481aab4f28dc2490ccd Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2032 Malicious code in ptyhon-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2c597bf070cc4aca68c2ad7549a718aef6d02eef4ac5b481aab4f28dc2490ccd Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2122 Malicious code in python-bniance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d41b4b625fe1031afaf87ca4c8d1ee7684b6f977d7aa06c270408683abb0966e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pythonn-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 48695707cb63c55f3d31f02afcc450e381442017b60f90f7eebffb87c0dc0622 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...