Crypto
Warning Crypto Investors—This Malicious Code Could Empty Your Wallet
Bitcoin emblem over a graph.
Recent reports have uncovered a series of malicious extensions in the Visual Studio Code, or VSCode, marketplace, targeting software developers and cryptocurrency enthusiasts with sophisticated attacks designed to compromise their systems and steal sensitive data. VSCode is a popular code editor used by millions of developers worldwide.
Security researcher Amit Assaraf recently revealed how attackers are exploiting the VSCode marketplace. Assaraf uncovered extensions that appeared to offer valuable features but were, in fact, Trojan horses for malware. One extension, masquerading as an official Zoom integration, seemed legitimate, boasting numerous installs and positive reviews. However, upon installation, the extension downloaded a malicious script from a Russian server, executing unauthorized commands on victims’ machines.
The attackers had carefully crafted their extensions to look authentic. They used fake reviews, linked to reputable repositories, and inflated download counts to make the tools appear credible—practices that can lull even experienced developers into a false sense of security.
Crypto in the VSCode Crosshairs
Further investigations revealed that this malicious activity is part of a broader campaign targeting developers working in blockchain and cryptocurrency environments. Reporting from BleepingComputer noted that some of these extensions claimed to support Ethereum development or blockchain toolkits. They also provided the following list of ones that were submitted to the VSCode marketplace:
- EVM.Blockchain-Toolkit
- VoiceMod.VoiceMod
- ZoomVideoCommunications.Zoom
- ZoomINC.Zoom-Workplace
- Ethereum.SoliditySupport
- ZoomWorkspace.Zoom (three versions)
- ethereumorg.Solidity-Language-for-Ethereum
- VitalikButerin.Solidity-Ethereum (two versions)
- SolidityFoundation.Solidity-Ethereum
- EthereumFoundation.Solidity-Language-for-Ethereum (two versions)
- SOLIDITY.Solidity-Language
- GavinWood.SolidityLang (two versions)
- EthereumFoundation.Solidity-for-Ethereum-Language
Adding to these findings, researchers at ReversingLabs uncovered how the VSCode campaign overlaps with similar malicious activity in the npm package repository. An npm package is a piece of reusable code that can be easily shared, distributed and integrated into software projects. These packages are used to build applications faster by reusing common functionalities, rather than writing everything from scratch. In their report, ReversingLabs explained how attackers often use multiple platforms to spread their malware, creating a more extensive attack surface that targets developers across ecosystems.
The Vulnerabilities Of The VSCode Ecosystem
While VSCode is celebrated for its versatility and user-friendly extension system, these same features make it a prime target for attackers. The issues stem from several vulnerabilities within the extension ecosystem:
- Unverified Publishers: Most of the extensions in the VSCode marketplace come from unverified publishers. This leaves developers with little assurance about an extension’s authenticity.
- Trust in Metrics: Developers often rely on install counts and reviews to gauge an extension’s credibility. Attackers exploit this trust by inflating these metrics and posting fake reviews.
- Limited Oversight: Despite Microsoft’s efforts to monitor and remove malicious extensions, the sheer volume of offerings in the marketplace makes it challenging to detect threats promptly.
VSCode: A Secondary Threat
Cryptocurrency wallets, whether stored on a computer or secured with a hardware wallet, are critical tools for managing digital assets. While these wallets are designed to protect private keys and transactions, the surrounding software environment—such as VSCode—can introduce vulnerabilities that put funds at risk, especially for wallets stored on a computer. Recent discoveries of malicious VSCode extensions demonstrate how a compromised development environment can lead to significant crypto losses, even for those who believe their wallets are secure.
The VSCode Threat to Computer Wallets
For users storing cryptocurrency on a desktop wallet, the risks posed by malicious VSCode extensions are immediate and direct. Here’s how it can happen:
- Keystroke Logging: A malicious VSCode extension, installed unknowingly, can quietly monitor and log every keystroke. If a user types in their wallet password, private keys or recovery phrases, this sensitive information is captured and sent to the attacker. Even the most secure desktop wallet becomes vulnerable if its credentials are exposed.
- Clipboard Hijacking: During transactions, users often copy and paste wallet addresses to avoid manual errors. Malware embedded in a VSCode extension can intercept clipboard activity, replacing the intended wallet address with the attacker’s. Without double-checking the address, the user may unknowingly send funds directly to the hacker.
- Fake Prompts or Interfaces: Some malicious extensions inject phishing-style prompts into the software environment, asking users to “verify” their wallet credentials or seed phrases. These prompts appear legitimate, but the data entered is captured by the attacker.
- Manipulated Transactions: For developers working with blockchain APIs, malicious extensions can intercept and alter transaction details. For instance, if a wallet is used to send funds programmatically, an attacker could change the destination address or transaction parameters without the user noticing.
Imagine a blockchain developer using VSCode to build an app that integrates with their desktop wallet for testing purposes. They install an extension claiming to simplify Ethereum contract deployment. Unbeknownst to them, the extension is malicious. It begins logging keystrokes and steals the wallet password. When the developer initiates a test transaction, the extension intercepts the API call and replaces the intended recipient address with one controlled by the attacker. The funds are irretrievably sent to the wrong destination.
These revelations are a wake-up call for developers and platform administrators alike. The trust users place in extension marketplaces is being weaponized. Relying on trust metrics alone—such as download counts or reviews—is not sufficient. Developers must remain vigilant and take proactive measures to protect their environments and their cryptocurrency.
Crypto
The Cryptocurrency News Everyone Missed: Pepeto Crosses $9 Million While PEPE and Chainlink Wait for a Catalyst
Consensus Miami just opened with more than 20,000 leaders in crypto, finance and policy filling the convention center, and the CLARITY Act stablecoin yield compromise reached its final text this month. The cryptocurrency news cycle is stacking events faster than most traders can follow, and the $629 million that poured into Bitcoin ETFs in a single session proves that conviction is climbing. Because Pepeto’s https://pepetoswap.com presale crossed $9 million while the spotlight stayed on BTC, the wallets loading into the entry are betting on a Binance listing that could outperform everything the conference discusses.
________________________________________
Cryptocurrency News: Consensus Miami Opens as CLARITY Act Advances
Consensus Miami 2026 began this week at the Miami Beach Convention Center with more than 20,000 attendees from across crypto, finance and regulation according to Yahoo Finance. The event lands as Bitcoin holds above $80,500 and the CLARITY Act stablecoin yield text cleared its final Senate compromise according to CoinDesk. The agenda covers institutional adoption, tokenization and exchange oversight, and the cryptocurrency news from this week could shape the second half of 2026 for altcoins and presales.
________________________________________
Where Pepeto, PEPE and Chainlink Stand in May’s Crypto Rotation
Pepeto
While Consensus Miami debates the future of regulation and PEPE and Chainlink wait for catalysts, Pepeto’s https://pepetoswap.com coming Binance listing sits at the center of the cryptocurrency news that most traders have not noticed yet. The data supports the attention: more than $9 million flowed into the presale at $0.0000001864 while the broader market dropped, a community of early believers doubled down during that drawdown, and traders expect returns between 100x and 300x once the marketplace opens for live trading. Every fact in that sequence points to one thing: this is where the real money is moving.
Because PepetoSwap runs zero fee trades across every token on the marketplace, small positions hold their value instead of getting chipped away by costs. The risk scorer reviews every contract before any token enters a wallet, so buyers filter out bad projects before they cost a cent. Every line of code behind the Pepeto marketplace cleared a SolidProof audit, and staking at 175% APY pays holders while they wait for the event that changes everything.
For traders tired of cryptocurrency news that moves prices without creating new entries, those tools turn headlines into action. The presale ends once the listing hits, and with traders targeting 100x to 300x from the current entry, the upside from Pepeto overshadows what PEPE or LINK can generate from their current levels.
https://youtu.be/wR3oOlNJj64?si=V7Ekv4mK69tQvNtI
________________________________________
PEPE
PEPE trades at $0.0000040 according to CoinMarketCap, sitting just above its 100 day EMA with a 7% gain over the past day. The token needs to clear $0.0000050 to confirm a fresh rally, but even a run to the 200 day average delivers limited gains compared to what a presale entry can multiply into after a single listing event.
________________________________________
Chainlink
Chainlink holds at $9,47 according to CoinMarketCap, supported by its role connecting real world data to smart contracts. LINK gained ground in April but still trades well below its 2021 high of $52, and even a push to $15 from here delivers a 63% return over months, which the cryptocurrency news cycle barely registers when presale entries multiply faster from a single event.
________________________________________
Conclusion
The cryptocurrency news this week stacks Consensus Miami, CLARITY Act progress, and a BTC rally past $80,500, but none of those headlines include the presale that quietly built the strongest case in the market. PEPE and Chainlink will ride the wave, but for returns that change a wallet, the debate about which entry leads was settled by the $9 million that already flowed in. Pepeto arrives with a full marketplace, risk scoring tools, and a cofounder whose first project at zero products reached a market cap most tokens dream about, which means more tools logically reaches more. The cryptocurrency news confirms the setup, and entering the Pepeto official website now turns that into a position before the listing draws the line between wallets that acted and everyone who reads about it after.
Click To Visit Pepeto Website To Enter The Presale: https://pepetoswap.com
________________________________________
FAQs
What does Consensus Miami mean for crypto?
The event brings 20,000 leaders together during a BTC rally, and cryptocurrency news from this week could shape regulation for the rest of 2026.
How does the CLARITY Act affect traders?
The stablecoin yield compromise clears a path for regulated returns, boosting confidence and adding stability for presale entries.
Why are wallets loading into Pepeto right now?
More than $9 million entered during fear, the marketplace runs with zero fees, and the Pepeto official website shows a Binance listing approaching.
________________________________________
Disclaimer:
The information shared in this article is for informational use only and does not constitute financial advice. Cryptocurrency investments are subject to extreme volatility and carry significant risk, including the loss of principal. Always conduct your own research or consult a licensed financial advisor before investing.
Contact: Dani Bonocci
Website: https://www.tokenwire.io
Phone: +971586738991
SOURCE: Pepeto
Press release distribution
This release was published on openPR.
Crypto
DTCC Tokenization Draws 50+ Firms for Live Securities Testing
Key Takeaways:
- DTCC plans July live trades before an October rollout for tokenized securities markets.
- Participation includes over 50 firms across banking, custody, trading, and digital asset sectors.
- DTC supports the effort with over $114 trillion in assets held across its custody system.
DTCC Tokenization Service Moves Toward Live Production
The Depository Trust & Clearing Corporation (DTCC), a leading American financial market infrastructure company, announced on May 4, 2026, that its tokenization service will move into limited live production trades in July before a planned October launch. The schedule gives banks, asset managers, brokers, exchanges, and digital asset firms a defined path to test tokenized securities through DTC’s infrastructure.
DTCC is building the service with input from more than 50 firms across traditional finance and digital asset markets. The effort is focused on real-world assets already custodied by The Depository Trust Company (DTC), rather than assets created outside existing market plumbing. Tokenized versions are expected to carry the same entitlements, investor protections, and ownership rights as securities held in traditional form. The first eligible assets fall within a defined liquid universe, including Russell 1000 constituents, major index-tracking exchange-traded fund (ETF) products, and U.S. Treasury bills, bonds, and notes. Frank La Salla, DTCC President and CEO, said:
“Our vision is coming to fruition: launching our tokenization service and successfully bridging TradFi and DeFi. We believe tokenization will significantly change how markets work and operate, bringing new levels of liquidity, transparency and efficiency to investors.”
Institutional Working Group Tests Market Infrastructure
DTC’s custody base gives the project its institutional scale, with more than $114 trillion in assets held across the depository. DTCC said the service is being developed to support production workflows and allow tokenized assets to operate across multiple chains. The work includes proving technical and operational processes before wider release. Regulatory clearance also frames the rollout. In December 2025, the U.S. Securities and Exchange Commission (SEC) issued a No-Action Letter allowing DTC to provide a defined tokenization service to DTC Participants and their clients for three years.
The working group’s roster shows how broadly the project reaches across market infrastructure, trading, custody, asset management, and crypto services. Participants in the DTCC Industry Working Group include Alpaca, Anchorage Digital, Apex Clearing Corporation, Backpack, Bank of America, BetaNXT, Bitgo Bank & Trust, N.A., Bitwave, Blackrock, BNP Paribas, Broadridge, Charles Schwab, Circle, Citadel Securities, Citi, Digital Asset, DriveWealth, DRW, EDX Markets LLC, Fireblocks, FIS, Fi-Tek, Franklin Templeton, Goldman Sachs, Hilltop Securities Inc., HSBC, Interchange Clearing, Invesco, Jefferies, J.P. Morgan, Lloyds Bank, Marex, Mirae Asset Securities (USA) Inc., Morgan Stanley, Nasdaq, NYSE Group, Inc., Ondo Finance, Payward, Principal Bank, Raymond James, RBC, Ripple Prime, Robinhood Markets, Inc., RQD*Clearing LLC, SEI, State Street, StoneX, Talos, TD Securities USA LLC, Tel-Aviv Stock Exchange, Tradestation Securities, Inc., Tradeweb, UBS, Velocity Clearing, LLC, Virtu Financial, Vision Financial Markets, and Wells Fargo.
The planned launch extends DTCC’s role from post-trade processing into tokenized market infrastructure, while keeping custody, rights, and controls tied to established systems. The phased schedule gives participating firms time to test interoperability, operational readiness, and market workflows before October. Brian Steele, DTCC Managing Director, President, Clearing & Securities Services, said:
“DTC’s tokenization service is designed to provide systemic scale where deep liquidity already lives.”
For DTCC, the initiative brings tokenization closer to live securities markets through a controlled, institution-led rollout.
Crypto
Bitcoin, XRP Flat, While Ethereum, Dogecoin Spike After Trump’s ‘Project Freedom’ Announcement: Why This
Cryptocurrency markets held steady as stock futures jumped Sunday, driven by fresh developments in the U.S.–Iran conflict following President Donald Trump’s “Project Freedom” announcement.
Overnight Spike For Crypto Market
Bitcoin picked up momentum late in the evening, climbing to an intraday high of $79,400 as bulls set their sights on a breakout above $80,000.
Ethereum also gained but faced resistance from the bears at $2,250. Dogecoin was up over 3.70% in the last 24 hours.
Over $160 million was liquidated in the past 24 hours, predominantly in short positions, according to Coinglass data.
Open interest in Bitcoin futures rose 1.80% over the last 24 hours to $58.44 billion. However, both retail and whale traders on Binance derivatives continued to lean bearish on the asset.
“Fear” sentiment prevailed in the market, according to the Crypto Fear & Greed Index.
Top Gainers (24 Hours)
The global cryptocurrency market capitalization stood at $2.57 trillion, up 0.29% over the last 24 hours.
Stocks Futures Rise
Stock futures ticked higher overnight on Sunday. The Dow Jones Industrial Average Futures rose 21 points, or 0.03%, as of 8:49 p.m. EDT. Futures tied to the S&P 500 gained 0.09%, while Nasdaq 100 Futures added 0.14%.
Trump announced on Truth Social a new initiative called “Project Freedom,” aimed at helping ships and crews from non-involved countries “safely” navigate out of the Strait of Hormuz.
“If, in any way, this Humanitarian process is interfered with, that interference will, unfortunately, have to be dealt with forcefully,” Trump added.
On Saturday, Trump said he is reviewing a new Iranian proposal to end the conflict, but cast doubt on whether it would be acceptable.
Is Bitcoin Bottom In?
Ali Martinez, a widely followed cryptocurrency commentator on X, highlighted Bitcoin’s nearly decade-long ascending trendline, with every touch preceding a “massive expansion” historically.
“With Bitcoin recently dipping to $65,000, it has held above this trendline again, suggesting the bottom could be in,” the analyst said.
Michaël van de Poppe, another prominent cryptocurrency commentator on X, describes Bitcoin’s drop to $60,000 in February as one of its “strongest” corrections ever.
“In that light, it came relatively close to the 200-Week MA and that’s where the price of Bitcoin stalls quite often,” Van De Poppe said. “That means: we can easily run to $92,000-$95,000 without any breakdown of the bear market trend, and we can easily start a bull market from here.”
Photo courtesy: Shutterstock
-
Dallas, TX2 minutes agoOur Least Favorite Dallas Cowboys 2026 NFL Draft Pick
-
Miami, FL8 minutes agoPhotographer Brings Measuring Tape to Miami GP to Get Cameras Past Security
-
Boston, MA14 minutes agoWorld Cup 2026 stadium guides: Welcome to Boston Stadium, which… isn’t really in Boston at all
-
Denver, CO20 minutes agoDenver welcomes national Democrats for 2028 convention site visit, starting with a trip on the A-Line
-
Seattle, WA26 minutes agoRitchie's homecoming spoiled with 5-run 6th inning
-
San Diego, CA32 minutes agoSan Francisco snaps its six-game skid by subduing San Diego
-
Milwaukee, WI38 minutes ago1st Costco in Milwaukee County; plans to break ground in Franklin this week
-
Atlanta, GA44 minutes agoAnalyzing the Braves’ Hot Start to the Season