慢雾科技
81Followers186Articles
Seven Deadly Threats to AI Agents Revealed: Malicious Plugins Are Targeting Your API Key
New fraud patterns targeting Agent users, malicious plugin attacks, and API key abuse are gradually becoming new security threats.
慢雾科技2 authors
Crypto Christmas Crash: Over $6 Million Loss, Analysis of the Trust Wallet Extended Wallet Hack
This backdoor incident stemmed from malicious source code modification of the Trust Wallet extension's internal codebase (analysis service logic), rather than the introduction of a tampered generic third-party package (such as a malicious npm package).
慢雾科技
Beware of Solana phishing attacks: Wallet Owner permissions may be compromised.
Attackers will use various methods to disguise links, such as airdrops, rewards, tasks, early test qualifications, or even pretend to be official announcements, making people think it's just a simple operation, but in reality, the pop-up signature hides high-risk permissions such as modifying the owner.
慢雾科技
Fake Zoom conference phishing leads to millions of dollars in losses: A deep dive into the attack methods
Users should verify carefully before clicking on the meeting link to avoid executing software and commands from unknown sources.
慢雾科技
Technical guidance: Smart contract implementation guide for Hong Kong stablecoin issuers
This section aims to lay the high-level architectural foundation for the stablecoin system. These architectural decisions are driven entirely by the most fundamental requirements of the Hong Kong Monetary Authority (HKMA) framework.
慢雾科技
Malicious robots reappear in Solana ecosystem: Private key leak trap hidden in configuration files
The Rust project performs covert network requests during the configuration initialization phase and dynamically decodes the attack server address.
慢雾科技
The whole story of the collapse of the Xinkangjia DGCX scam: Where did the 13 billion yuan of funds go?
On-chain behavior shows that the project may have built a complex multi-level funding structure, with funds flowing in from a centralized entrance and then flowing out after multiple transfers, initially possessing the on-chain operation characteristics common to Ponzi schemes.
慢雾科技
Aeza Group, a Russian service provider behind hackers, dark web and drug markets, is sanctioned
This article will sort out the background and operation model of Aeza Group, and combine the analysis of on-chain anti-money laundering and tracking tool MistTrack to restore its role in the criminal ecosystem.
慢雾科技
Physical kidnapping: The spanner attack after Bitcoin's new high
As the value of crypto assets continues to rise, wrench attacks against crypto users are becoming more frequent. This article will analyze this type of attack method in depth, review typical cases, sort out the criminal chain behind it, and put forward practical prevention and response suggestions.
慢雾科技
Malicious NPM package steals private keys, Solana user assets are stolen
Malicious open source projects implanted backdoor NPM packages to steal user private keys, resulting in the theft of Solana wallet assets.
慢雾科技
The “Phantom” on the Chain: Huiwang Payment Behind the Circulation of Over 55 Billion USDT
As the global fight against online fraud, underground payment networks and illegal cross-border money laundering continues to intensify, a platform called HuionePay has attracted great attention from regulators.
慢雾科技
Nearly $100 million stolen: Iranian exchange Nobitex theft incident
The attacker not only transferred the funds, but also actively transferred a large amount of assets to a specially designed destruction address. The value of the assets that were "burned" was nearly 100 million US dollars.
慢雾科技
Web3 Security Guide: Common Pitfalls of Hardware Wallets
This article will focus on the three major aspects of hardware wallet purchase, use and storage, sort out common risks, analyze typical scams based on real cases, and provide practical protection suggestions to help users effectively protect the security of encrypted assets.
慢雾科技
Pandora's Box: How do unlimited large models threaten the security of the encryption industry?
This article will review typical unrestricted LLM tools, introduce how they are abused in the crypto industry, and explore related security challenges and solutions.
慢雾科技
Analysis of the Cork Protocol hack: Losses exceed 10 million US dollars
The root cause of this attack is that the data passed by the user was not strictly verified to be in line with expectations, which allowed the protocol liquidity to be manipulated and transferred to unexpected markets, and then illegally redeemed by the attacker for profit.
慢雾科技
Industry News
Market Trends
Curated Readings
Subscribe