PANews reported on February 20 that the digital asset wallet TokenPocket posted on the X platform that in response to the incident of hackers collecting and stealing user assets on February 14, the team paid close attention to it and worked closely with the security team to systematically organize and conduct in-depth on-chain analysis of the user security-related feedback received recently, striving to quickly identify problems and take effective countermeasures. Through questionnaires, one-on-one communication and other methods, we maintain close contact with affected users, assist in collecting relevant information, and provide support for traceability and security warnings. Technical analysis found that the user had downloaded the third-party mining software "Bom", which has malicious behavior of unauthorized access to user albums and uploading data. This will cause the user's mnemonic or private key to be leaked, thereby causing asset security risks.
Users are reminded to immediately stop using unofficial, unverified third-party tools (such as "mining" and "airdrop" software), which may contain malicious code to steal privacy; do not save mnemonics/private keys through screenshots, social platforms (including "only visible to you"), network disks, etc., as attackers may exploit Trojans or cloud vulnerabilities to obtain information.
