CVE-2025-52294

CVE-2025-52294 affects Trust Wallet v8.45 and is described as insufficient validation of the screen lock mechanism, allowing physically proximate attackers to bypass the lock screen and view the wallet balance. The CVSS 3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) yields a base score of 5.7 (...

Scammers Use Inferno Drainer to Steal $43K from CoinMarketCap Users

Scammers used Inferno Drainer to steal $43,000 in crypto from 110 CoinMarketCap users through a fake wallet prompt embedded in the site’s front-end...

Secure User-Friendly Blockchain Modular Wallet Design Using Android and OP-TEE

Emerging crypto economies still hemorrhage digital assets because legacy wallets leak private keys at almost every layer of the software stack, from user-space libraries to kernel memory dumps. This paper solves that twin crisis of security and interoperability by re-imagining key management as a...

Banana Squad Hides Data-Stealing Malware in Fake GitHub Repositories

Banana Squad hid data-stealing malware in fake GitHub repos posing as Python tools, tricking users and targeting sensitive info like browser and wallet data...

MAL-2025-5394 Malicious code in dynamic-global-wallet (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in dynamic-global-wallet (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5456 Malicious code in rif-wallet-services (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in rif-wallet-services (npm)

The package communicates with a domain associated with malicious activity...

Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets

A new malware campaign is exploiting a weakness in Discord's invitation system to deliver an information stealer called Skuld and the AsyncRAT remote access trojan. "Attackers hijacked the links through vanity link registration, allowing them to silently redirect users from trusted sources to...

Malicious code in zora-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2764c900ca7254d541cb02d4393365a610648e80866768703dcae298b4f3a4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4948 Malicious code in zora-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4947 Malicious code in zora-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2764c900ca7254d541cb02d4393365a610648e80866768703dcae298b4f3a4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages...

CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages...

CVE-2025-5719

CVE-2025-5719 relates to Vivo Wallet with an authentication bypass that could grant access to specific pages. Connected sources confirm the vulnerability class (authentication bypass) and name the affected software as Vivo Wallet/mobile wallet. The Red Hat and PT-Security entries corroborate the ...

CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages...

Vivo wallet 安全漏洞

Vivo wallet is a mobile wallet application from the Chinese company Vivo. A security vulnerability exists in Vivo wallet, which stems from an authentication bypass that could lead to accessing specific pages...

MAL-2025-4645 Malicious code in lib-wallet-pay-btc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1867a5dee260868eb8f3e51c3df89b8f1e5752dd2c8529cbdc4ac73ab18d7394 Any computer that has this package installed or running should be considered...

Next Generation Authentication for Data Spaces: an Authentication Flow Based on Grant Negotiation and Authorization Protocol for Verifiable Presentations (GNAP4VP)

Identity verification in Data Spaces is a fundamental aspect of ensuring security and privacy in digital environments. This paper presents an identity verification protocol tailored for shared data environments within Data Spaces. This protocol extends the Grant Negotiation and Authorization...