以太坊研究日报
Trust Wallet browser extension v2.68 shipped malicious code and about $7M was stolen; the team told users to disable and upgrade and promised refunds, and Ethereal later reported a likely link to November's Sha1-Hulud 2 npm supply chain attack. pcaversaccio repeated that hot wallets are a security bug.
Image: Default image (no real image available for this day)
15:51, per Ethereal news #4; Ethereal news #5 later said attackers likely used November's Sha1-Hulud 2 npm supply chain attack to get source code and a web store API key.
TrustWallet: about $7M stolen via browser extension v2.68, do not open it, disable and upgrade, users will be refunded, 15:51, per Ethereal news #4; Ethereal news #5 later said attackers likely used November's Sha1-Hulud 2 npm supply chain attack to get source code and a web store API key.
TrustWallet: about $7M stolen via browser extension v2.68, do not open it, disable and upgrade, users will be refunded, 15:51, per Ethereal news #4; Ethereal news #5 later said attackers likely used November's Sha1-Hulud 2 npm supply chain attack to get source code and a web store API key.
(gcolvin), submitted and merged.
04:43; VitalikButerin: worries Europe drifts into an ideology proud of a sanitized online environment, 22:31; dcbuilder: at least everyone will learn online privacy tools, 04:40.
Pcaversaccio: again, hot wallets are a security bug, 04:43; VitalikButerin: worries Europe drifts into an ideology proud of a sanitized online environment, 22:31; dcbuilder: at least everyone will learn online privacy tools, 04:40.
Pcaversaccio: again, hot wallets are a security bug, 04:43; VitalikButerin: worries Europe drifts into an ideology proud of a sanitized online environment, 22:31; dcbuilder: at least everyone will learn online privacy tools, 04:40.