Connect with us

Crypto

CoinMarketCap briefly hacked to drain crypto wallets via fake Web3 popup

Published

on

CoinMarketCap briefly hacked to drain crypto wallets via fake Web3 popup

CoinMarketCap, the popular cryptocurrency price tracking site, suffered a website supply chain attack that exposed site visitors to a wallet drainer campaign to steal visitors’ crypto.

On Friday evening, January 20, CoinMarketCap visitors began seeing Web3 popups asking them to connect their wallets to the site. However, when visitors connected their wallets, a malicious script drained cryptocurrency from them.

The company later confirmed threat actors utilized a vulnerability in the site’s homepage “doodle” image to inject malicious JavaScript into the site.

“On June 20, 2025, our security team identified a vulnerability related to a doodle image displayed on our homepage. This doodle image contained a link that triggered malicious code through an API call, resulting in an unexpected popup for some users when visited our homepage,” reads a statement posted on X.

“Upon discovery, We acted immediately to remove the problematic content, identified the root cause, and comprehensive measures have been implemented to isolate and mitigate the issue.”

Advertisement

“We can confirm all systems are now fully operational, and CoinMarketCap is safe and secure for all users.”

Cybersecurity firm c/side explained that the attack worked by the threat actors somehow modifying the API used by the site to retrieve a doodle image to display on the homepage. This tampered JSON payload now included a malicious script tag that injected a wallet drainer script into CoinMarketCap from an external site named “static.cdnkit[.]io”.

When someone visited the page, the script would execute and display a fake wallet connect popup showing CoinMarketCap branding and mimicking a legitimate Web3 transaction request. However, this script was actually a wallet drainer designed to steal connected wallets’ assets.

“This was a supply chain attack, meaning the breach didn’ target CMC’s own servers but a third-party tool or resource used by CMC,” explains c/side.

“Such attacks are hard to detect because they exploit trusted elements of a platform.”

Advertisement

More details about the attack came later from a threat actor known as Rey, who said that the attackers behind the CoinMarketCap supply chain attack shared a screenshot of the drainer panel on a Telegram channel.

This panel indicated that $43,266 was stolen from 110 victims as part of this supply chain attack, with the threat actors speaking in French on the Telegram channel.

Screenshot of drainer panel shared on Telegram
Screenshot of drainer panel shared on Telegram
Source: Rey

As the popularity of cryptocurrency has boomed, so has the threat from wallet drainers, which are commonly used in attacks.

Unlike traditional phishing, these types of attacks are more often promoted through social media posts, advertisements, spoofed sites, and malicious browser extensions that include malicious wallet-draining scripts.

Reports indicate that wallet drainers stole almost $500 million in 2024 through attacks targeting more than 300,000 wallet addresses.

The problem has become so pervasive that Mozilla recently introduced a new system to detect wallet drainers in browser add-ons uploaded to the Firefox Add-on repository.

Advertisement

Tines Needle

Patching used to mean complex scripts, long hours, and endless fire drills. Not anymore.

In this new guide, Tines breaks down how modern IT orgs are leveling up with automation. Patch faster, reduce overhead, and focus on strategic work — no complex scripts required.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Crypto

Gemini Titan Enters US Prediction Markets With Yes-or-No Event Contracts

Published

on

Gemini Titan Enters US Prediction Markets With Yes-or-No Event Contracts
Gemini Titan now holds a U.S. license to offer prediction markets, setting up a fierce push for trader liquidity as the platform challenges rivals, draws in new market flow, and builds toward a broader lineup of future derivatives products.
Continue Reading

Crypto

Crypto mogul Do Kwon sentenced to 15 years in prison over $40B ‘epic fraud’

Published

on

Crypto mogul Do Kwon sentenced to 15 years in prison over B ‘epic fraud’

Do Kwon, the South Korean cryptocurrency entrepreneur behind two digital currencies that lost an estimated $40 billion in 2022, was sentenced on Thursday to 15 years in prison for for what a judge called an “epic fraud.”

U.S. District Judge Paul A. Engelmayer, who handed down the sentence, sharply rebuked Kwon for repeatedly lying to everyday investors who trusted him with their life savings.

“This was a fraud on an epic, generational scale. In the history of federal prosecutions, there are few frauds that have caused as much harm as you have, Mr. Kwon,” Engelmayer said during a hearing in Manhattan federal court.

Crypto Mogul Do Kwon, shown in 2023, was sentenced in New York federal court on Thursday to 15 years in prison for fraud and conspiracy. REUTERS

Kwon, 34, who co-founded Singapore-based Terraform Labs and developed the TerraUSD and Luna currencies, previously pleaded guilty and admitted to misleading investors about a coin that was supposed to maintain a steady price during periods of crypto market volatility.

He is one of several cryptocurrency moguls to face federal charges after a slump in digital token prices in 2022 prompted the collapse of a number of companies.

Advertisement

Dressed in yellow prison garb, Kwon addressed the court and apologized to his victims, including the hundreds who submitted letters to the court describing the harm they had suffered.

“All of their stories were harrowing and reminded me again of the great losses that I’ve caused. I want to tell these victims that I am sorry,” Kwon said.

Ayyildiz Attila, one of the hundreds of victims who submitted letters to the court, said he lost between $400,000 and $500,000 in the collapse.

Kwon in custody in Montenegro in 2024. AP

“My savings, my future, and the results of years of sacrifice disappeared. I struggled to keep up with payments and responsibilities, and everything I had worked forwas erased,” Attila said.

Kwon’s lawyer Sean Hecker said in an email after the sentencing that Kwon spoke from the heart, expressed genuine remorse and will continue his efforts to make amends.

Advertisement

US Attorney Jay Clayton in Manhattan said in a statement following the hearing that Kwon devised elaborate schemes to inflate the value of his cryptocurrencies and fled accountability when his crimes caught up to him.

Prosecutors had asked for a sentence of at least 12 years in prison, saying the crash of Kwon’s Terra cryptocurrency caused billions of dollars in losses and triggered a cascade of crises in the crypto market.

Kwon’s lawyers had asked that he be sentenced to no more than five years so he can return to South Korea to face criminal charges.

Kwon was accused of misleading investors in 2021 about TerraUSD, a so-called stablecoin designed to maintain a value of $1. REUTERS

Prosecutors charged Kwon in January with nine criminal counts for securities fraud, wire fraud, commodities fraud and money laundering conspiracy.

Kwon was accused of misleading investors in 2021 about TerraUSD, a so-called stablecoin designed to maintain a value of $1. Prosecutors alleged that when TerraUSD slipped below its $1 peg in May 2021, Kwon told investors a computer algorithm known as “Terra Protocol” had restored the coin’s value.

Advertisement

Instead, Kwon arranged for a high-frequency trading firm to secretly buy millions of dollars of the token to artificially prop up its price, according to charging documents.

Kwon pleaded guilty in August to two counts, conspiracy to defraud and wire fraud, and apologized in court for his conduct.

“I made false and misleading statements about why it regained its peg by failing to disclose a trading firm’s role in restoring that peg,” Kwon said at the time. “What I did was wrong.”

Kwon agreed in 2024 to pay $80 million as a civil fine and be banned from crypto transactions as part of a $4.55 billion settlement he and Terraform reached with the Securities and Exchange Commission.

He also faces charges in South Korea. As part of his plea deal, prosecutors will not oppose Kwon’s potential application to be transferred abroad after serving half his US sentence.

Advertisement
Continue Reading

Crypto

Robinhood Sets 2026 Crypto Vision With Expanded Global Access

Published

on

Robinhood Sets 2026 Crypto Vision With Expanded Global Access
Robinhood signaled a sweeping 2026 crypto expansion, showcasing accelerating platform growth, wider U.S. and European access, and new products capped by a Layer 2 network aimed at propelling the company deeper into global tokenization and advanced digital-asset trading.
Continue Reading
Advertisement

Trending