Connect with us

Crypto

Malicious packages for dYdX cryptocurrency exchange empties user wallets

Published

on

Malicious packages for dYdX cryptocurrency exchange empties user wallets

Open source packages published on the npm and PyPI repositories were laced with code that stole wallet credentials from dYdX developers and backend systems and, in some cases, backdoored devices, researchers said.

“Every application using the compromised npm versions is at risk ….” the researchers, from security firm Socket, said Friday. “Direct impact includes complete wallet compromise and irreversible cryptocurrency theft. The attack scope includes all applications depending on the compromised versions and both developers testing with real credentials and production end-users.”

Packages that were infected were:

npm (@dydxprotocol/v4-client-js):

  • 3.4.1
  • 1.22.1
  • 1.15.2
  • 1.0.31

PyPI (dydx-v4-client):

Perpetual trading, perpetual targeting

dYdX is a decentralized derivatives exchange that supports hundreds of markets for “perpetual trading,” or the use of cryptocurrency to bet that the value of a derivative future will rise or fall. Socket said dYdX has processed over $1.5 trillion in trading volume over its lifetime, with an average trading volume of $200 million to $540 million and roughly $175 million in open interest. The exchange provides code libraries that allow third-party apps for trading bots, automated strategies, or backend services, all of which handle mnemonics or private keys for signing.

Advertisement

The npm malware embedded a malicious function in the legitimate package. When a seed phrase that underpins wallet security was processed, the function exfiltrated it, along with a fingerprint of the device running the app. The fingerprint allowed the threat actor to correlate stolen credentials to track victims across multiple compromises. The domain receiving the seed was dydx[.]priceoracle[.]site, which mimics the legitimate dYdX service at dydx[.]xyz through typosquatting.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Crypto

White House Convenes Crypto Leaders, Banks, Policymakers for Market Structure Talks

Published

on

White House Convenes Crypto Leaders, Banks, Policymakers for Market Structure Talks
Bipartisan momentum is building behind U.S. crypto legislation as the White House intensifies talks with industry, banks, and lawmakers, signaling renewed efforts to break a regulatory stalemate and advance long-awaited market structure rules.
Continue Reading

Crypto

Perry and Jackson police partner to investigate cryptocurrency crimes

Published

on

Perry and Jackson police partner to investigate cryptocurrency crimes
play

Perry and Jackson township police are partnering to investigate crimes related to cryptocurrency. The cooperation has already resulted in the recovery of stolen assets, police say.

Perry Township Police Chief Bryan D. Taylor announced Feb. 10 that as part of the collaboration, Jackson Township police will provide certified cryptocurrency investigative support for cases originating in Perry.

He wrote in a social media post that the partnership allows Perry police to leverage specialized expertise in an evolving area of financial crime, ensuring more thorough investigations and improved outcomes for victims.

Advertisement

“This partnership has already produced positive results,” Taylor wrote. “In a recent case originating in Perry Township, investigative efforts led by Jackson Township Police Department resulted in the successful recovery of cryptocurrency funds, which were returned to the victim. Recovering stolen digital assets is often complex and challenging, making this outcome especially meaningful for the victim and the community.”

He extended appreciation to the Jackson Township Police Department and Jackson Detective Jeffrey Aynes “for their professionalism, technical expertise and dedication throughout the investigation. Their commitment to collaborative law enforcement, and victim-focused outcomes exemplifies the strength of regional partnerships.

“Cryptocurrency crimes present unique challenges that require specialized training and expertise,” he said. “This partnership strengthens our ability to pursue these cases effectively and reinforces our shared commitment to serving and protecting our communities.”

Advertisement

He wrote that the Perry Township Police Department remains committed to adapting to emerging crime trends, using partnerships and pursuing justice for victims of financial crimes.

Continue Reading

Crypto

SoFi Technologies Is Making Significant Moves in the Cryptocurrency Market. If History Repeats, Investors Can See Supercharged Returns. | The Motley Fool

Published

on

SoFi Technologies Is Making Significant Moves in the Cryptocurrency Market. If History Repeats, Investors Can See Supercharged Returns. | The Motley Fool

This innovative fintech enterprise is going full steam ahead in the world of blockchain technology.

When asked what they see as the most innovative industries, investors probably won’t pick financial services. But SoFi Technologies (SOFI +2.30%) is changing that narrative. Its monster growth proves how well it’s resonating with customers.

The fintech stock is making an aggressive push into the cryptocurrency market. If history repeats, shareholders may enjoy supercharged returns.

Image source: Getty Images.

SoFi is putting its foot on the crypto gas pedal

Just in the final six months of 2025, SoFi made some big moves that indicate management’s heightened focus on blockchain technology.

Advertisement

In August, SoFi announced an exciting partnership with Lightspark to offer a new capability. SoFi Pay customers can send fast and cheap cross-border payments to more than 30 countries within the app. These transactions use the Bitcoin Lightning network.

With SoFi Crypto, the business launched crypto trading in November, allowing its members to buy, sell, and hold certain digital assets. This is the first time a nationally chartered, federally insured bank made such a move.

In December, SoFi introduced its fully reserved stablecoin, called SoFiUSD, leaning into one of the hottest trends in the digital asset industry. This initiative “will enable SoFi to serve as a stablecoin infrastructure provider for banks, fintechs, and enterprise platforms,” according to the press release.

“Blockchain is a technology super cycle that will fundamentally change finance, not just in payments, but across every area of money,” Chief Executive Officer Anthony Noto said. He has high hopes.

Looking ahead, crypto-backed lending, institutional trading and custody, and business banking are all focus areas.

Advertisement
SoFi Technologies Stock Quote

Today’s Change

(2.30%) $0.48

Current Price

$21.34

There is long-term upside for investors

Critics can argue that SoFi is getting distracted by an unproven technology. Skeptics might say that the company should focus on core revenue generators. This includes lending and fee-based banking activities. But investors have to let the leadership team do what it thinks is best. After all, SoFi has been impressively successful up to this point.

There is clearly upside for investors if things work out. The crypto market is currently in a downturn. Its market cap of $2.4 trillion is 44% below its peak from October (as of Feb. 9). However, the trailing five-year gain of 104% is still notable.

Assuming the crypto market continues its long-term ascent and is much more valuable in five or 10 years, it puts SoFi in a wonderful position to drive durable growth. Should the digital asset ecosystem continue to grow, it will fuel confidence that the industry is here to stay, supporting the belief that blockchain technology has real use within financial services.

With more adoption of SoFi’s related endeavors, the financials could get a boost, providing a tailwind to the stock price.

Advertisement
Continue Reading

Trending