SlowMist

🚨 URGENT SECURITY ALERT: HashiCorp Vault Vulnerabilities Expose Crypto Wallets & Keys
🔐 Critical Risk: Multiple zero-day vulnerabilities found in HashiCorp Vault—a top tool for crypto wallet/key management.

Exploits could:
✅ Bypass MFA & locks
✅ Enable remote code execution
✅ Compromise entire infrastructures

🛡️ Action Steps:
1️⃣ Upgrade immediately to the latest patched version.
2️⃣ Audit access logs for suspicious activity.
3️⃣ Isolate critical systems until confirmed secure.

🔗 Official Response:
HashiCorp + Cyata are collaborating on fixes.
SlowMist CISO warns: "Delay = Risk."
#HashiCorp #SlowMist #BinanceSecurity
💬 Discussion:
→ Are your orgs affected? Comment protocols below!
→ Tag projects using HashiCorp Vault!

🚨 Breaking News Alert 🚨

⚠️ Fake Ledger Scam Resurfaces — Targeting High-Net-Worth Users! 🤑💰

According to PANews, the notorious ‘Fake Ledger’ scam is BACK!
Hackers are 📦 mailing counterfeit Ledger devices with fake manuals, urging victims to enter their real recovery phrases into a 🕵️‍♂️ malicious app — leading to 💸 asset theft!

This attack, first spotted in 2021, now includes:
🔁 Preset recovery phrases
🎲 Tampered RNG chips

🧠 Expert Warning: These physical phishing attacks may seem rare but have a 🚀 high success rate, especially among 💼 high-net-worth users.

How to Stay Safe:
✅ Never enter your seed phrase into ANY app or website
✅ Buy ONLY from official sources
❌ Don’t trust unsolicited packages — even if it looks “official”

🔐 Protect your crypto. Stay sharp. Stay safe!

#CryptoSecurity #LedgerScam #Web3Alert #PhishingScam #SlowMist
$BTC
$ETH
$XRP

$27M Heist Hits BigONE in Sophisticated Supply Chain Attack 🚨

In a major blow to crypto security, BigONE Exchange has fallen victim to a supply chain attack that drained over $27 million from its platform.

🔍 According to on-chain security firm SlowMist, the attacker compromised BigONE’s production network—specifically the servers handling account management and risk control.

Instead of stealing private keys, the attacker manipulated the operating logic of these systems, authorizing fraudulent withdrawals without triggering alarms.

💻 The breach allowed the hacker to siphon funds across multiple chains including Ethereum, BNB Chain, Solana, Bitcoin, and Tron. SlowMist has already tracked the suspicious wallet addresses and is actively monitoring the movement of stolen assets.

🛡️ In response, BigONE has:

Shut down deposit and withdrawal services temporarily

Identified and patched the vulnerability

Activated internal security reserves to protect user assets

Started borrowing external liquidity to restore platform operations

“All private keys remain secure,” said BigONE, adding that services will resume shortly after implementing enhanced security reinforcements.

This incident underscores a growing threat in the crypto world: server-side logic manipulation, where attackers don’t need access to wallets—they just change the rules of the game.

Stay alert, stay secure. 🧠🔐

#BigONE #CryptoHack #SupplyChainAttack #SlowMist #Web3Security

⚠️ Warning: $EOS Address Spoofing Attack!

#SlowMist reports an ongoing attack in the EOS network where scammers are creating fake accounts resembling #OKX and Binance. They send small amounts (0.001 EOS) to users with the goal of tricking them into making transactions, leading to stolen funds. 👀💰

Be cautious, double-check addresses before interacting with any EOS transactions, and stay alert! 💥

#EOS重大利好

SlowMist Security Alert: Android banking Trojan "Crocodilus" attacks crypto users

On June 4, SlowMist issued a security alert that the Android banking Trojan "Crocodilus" has recently been upgraded and has attacked global cryptocurrency users and banking applications. The main threats include:

Spreading through fake browser updates in Facebook ads;
Using overlay attacks to steal login credentials;

Extracting crypto wallet mnemonics and private keys;

Injecting fake "bank support" numbers into contact lists;

Malware as a service: available for rent ($100-300 per attack).
Remind users to avoid unknown app updates and ad links.

#Trojan #SlowMist