Lucene search
K

25 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/21 12:0 a.m.8 views

Malicious code in defi-threat-scanner (npm)

A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z – 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...

5.8AI score
Exploits0References16
OSV
OSV
added 2026/05/21 12:0 a.m.4 views

MAL-2026-4219 Malicious code in wallet-security-checker (npm)

A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z – 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...

5.8AI score
Exploits0References14
GithubExploit
GithubExploit
added 2026/03/03 7:57 p.m.136 views

SPARTAN

SPARTAN v2.0 — Autonomous Security Audit & Exploit Agent...

6.1AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/11/01 12:0 a.m.3 views

Penetrating the Hostile: Detecting DeFi Protocol Exploits through Cross-Contract Analysis

Decentralized finance DeFi protocols are crypto projects developed on the blockchain to manage digital assets. Attacks on DeFi have been frequent and have resulted in losses exceeding $80 billion. Current tools detect and locate possible vulnerabilities in contracts by analyzing the state changes...

7AI score
Exploits0
The Hacker News
The Hacker News
added 2025/09/02 4:39 p.m.7 views

Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE

The North Korea-linked threat actor known as the Lazarus Group has been attributed to a social engineering campaign that distributes three different pieces of cross-platform malware called PondRAT, ThemeForestRAT, and RemotePE. The attack, observed by NCC Group's Fox-IT in 2024, targeted an...

7.1AI score
Exploits0
HackRead
HackRead
added 2025/07/03 7:55 a.m.4 views

Ethereum’s Pivotal Role in Decentralized Finance Evolution

Once upon a time, say, 2016, Ethereum was a curious new arrival in the crypto space. It promised…...

7.3AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/06/21 12:0 a.m.3 views

A Theory of Lending Protocols in DeFi

Lending protocols are one of the main applications of Decentralized Finance DeFi, enabling crypto-assets loan markets with a total value estimated in the tens of billions of dollars. Unlike traditional lending systems, these protocols operate without relying on trusted authorities or off-chain...

6.7AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/06/21 12:0 a.m.5 views

Explain First, Trust Later: LLM-Augmented Explanations for Graph-Based Crypto Anomaly Detection

The decentralized finance DeFi community has grown rapidly in recent years, pushed forward by cryptocurrency enthusiasts interested in the vast untapped potential of new markets. The surge in popularity of cryptocurrency has ushered in a new era of financial crime. Unfortunately, the novelty of t...

6.9AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/05/31 12:0 a.m.4 views

Scaling DeFi with ZK Rollups: Design, Deployment, and Evaluation of a Real-Time Proof-Of-Concept

Ethereum's scalability limitations pose significant challenges for the adoption of decentralized applications dApps. Zero-Knowledge Rollups ZK Rollups present a promising solution, bundling transactions off-chain and submitting validity proofs on-chain to enhance throughput and efficiency. In thi...

6.9AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/05/16 12:0 a.m.3 views

DMind Benchmark: toward a Holistic Assessment of LLM Capabilities across the Web3 Domain

Large Language Models LLMs have achieved impressive performance in diverse natural language processing tasks, but specialized domains such as Web3 present new challenges and require more tailored evaluation. Despite the significant user base and capital flows in Web3, encompassing smart contracts...

7.2AI score
Exploits0
OSV
OSV
added 2025/03/28 1:5 p.m.8 views

MAL-2025-2958 Malicious code in eth-defi (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
HackRead
HackRead
added 2025/03/06 7:44 p.m.11 views

Bitcoin and Cybersecurity: Protecting Digital Assets in a Decentralized World

One of the many advancements in the financial system is the adoption of Bitcoin, which has shifted the…...

7.3AI score
Exploits0
HackRead
HackRead
added 2024/12/23 12:54 p.m.11 views

Why Ethereum Will Be a Key Platform for Businesses in the Future

Explore how Ethereum revolutionizes industries with smart contracts, DeFi, NFTs, gaming, DAOs, and sustainability, shaping the future of…...

7.3AI score
Exploits0
The Hacker News
The Hacker News
added 2024/10/24 9:53 a.m.37 views

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome to seize control of infected devices. Cybersecurity vendor Kaspersky said it made the discovery after it came across a novel attack chain in May 20...

9.6CVSS9.2AI score0.01063EPSS
Exploits2
Securelist
Securelist
added 2024/10/23 11:0 a.m.21 views

The Crypto Game of Lazarus APT: Investors vs. Zero-days

Introduction Lazarus APT and its BlueNoroff subgroup are a highly sophisticated and multifaceted Korean-speaking threat actor. We closely monitor their activities and quite often see them using their signature malware in their attacks — a full-feature backdoor called Manuscrypt. According to our...

9.6CVSS7.7AI score0.01063EPSS
Exploits2
The Hacker News
The Hacker News
added 2024/09/16 12:0 p.m.15 views

North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor Malware

Cybersecurity researchers are continuing to warn about North Korean threat actors' attempts to target prospective victims on LinkedIn to deliver malware called RustDoor. The latest advisory comes from Jamf Threat Labs, which said it spotted an attack attempt in which a user was contacted on the...

7.6AI score
Exploits0
The Hacker News
The Hacker News
added 2022/09/21 12:21 p.m.21 views

Crypto Trading Firm Wintermute Loses $160 Million in Hacking Incident

In what's the latest crypto heist to target the decentralized finance DeFi space, hackers have stolen digital assets worth around $160 million from crypto trading firm Wintermute. The hack involved a series of unauthorized transactions that transferred USD Coin, Binance USD, Tether USD, Wrapped...

Exploits0
Rapid7 Blog
Rapid7 Blog
added 2022/08/31 6:0 p.m.28 views

[Security Nation] Gordon “Fyodor” Lyon on Nmap, the Open-Source Security Scanner

!\Security Nation\ Gordon “Fyodor” Lyon on Nmap, the Open-Source Security Scannerhttps://blog.rapid7.com/content/images/2022/08/securitynationlogo-2.jpg In this episode of Security Nation, Jen and Tod chat with Gordon “Fyodor” Lyon, author of the widely used open-source Nmap Security Scanner. On...

7.3AI score
Exploits0
The Hacker News
The Hacker News
added 2022/08/30 6:12 a.m.33 views

FBI Warns Investors to Take Precautions with Decentralized Financial Platforms

The U.S. Federal Bureau of Investigation FBI on Monday warned of cyber criminals increasingly exploiting flaws in decentralized finance DeFi platforms to plunder cryptocurrency. "The FBI has observed cyber criminals exploiting vulnerabilities in the smart contracts governing DeFi platforms to ste...

0.4AI score
Exploits0
HackRead
HackRead
added 2022/08/04 6:6 p.m.14 views

If Bitcoiners Want Bitcoin To Make It Big, They Need DeFi

By Owais Sultan In the last couple of years, decentralized finance and Bitcoin have exploded into mainstream awareness. From 2020 to… This is a post from HackRead.com Read the original post: If Bitcoiners Want Bitcoin To Make It Big, They Need DeFi...

3.8AI score
Exploits0
Rows per page
Query Builder