Article
AI As adoption grows, crypto security faces an urgent threat: multiple projects were attacked during the week, with third-party dependencies and personnel risks becoming major weak points.
According to BlockBeats,October 28, as AI tools are widely used for code auditing, vulnerability discovery, and the generation of automated attack scripts, the barrier to attacks in the crypto sector has fallen significantly. The window from vulnerability discovery to exploitation has narrowed, and weak links in supply chains, third-party components, and personnel have been exposed more efficiently. This week, security incidents involving multiple projects emerged in quick succession, with third-party dependencies and operational permission issues particularly prominent.
Coinbase The previously disclosed internal data breach continues to have repercussions. Attackers obtained sensitive data on approximately 69000 users by bribing overseas outsourced customer-service personnel, including names, addresses, phone numbers, email addresses, images of certain identity documents, account balances, and transaction histories. The attackers subsequently demanded 20000000 USD in ransom, which the company refused. The company has clearly stated that user passwords, private keys, and funds themselves were not directly stolen; however, the leaked data was used in subsequent phishing and social-engineering attacks. The company estimates its overall response costs to be in the hundreds of millions of USD, and continues to cooperate with law-enforcement authorities in pursuing accountability.
Solana Trading automation platform Bloom officially confirmed a security incident on October 26. Attackers exploited a complex remote code execution vulnerability in a third-party module to steal approximately 9 from 49 wallet addresses belonging to 9408 SOL users (approximately 947000 USD). The company has clearly stated that user private keys were not accessed or leaked, and that other wallets are secure. The platform committed to and has completed full reimbursement of 100%.
Indian trading platform CoinDCX confirmed losses of approximately 15990000 USD. The funds came from an old wallet that had been claimed to be retired following an earlier hacking incident, and were stolen after deposits accumulated due to an automated fund-sweeping service failure. The company said it would absorb the losses. It had previously described the related reports as false alarms before formally acknowledging the incident, while phishing activity targeting users also appeared during the same period.
BNB Chain prediction market MYRIAD experienced an internal operations wallet exploitation incident on October 26. Using private keys exposed weeks earlier due to a third-party library vulnerability, attackers manipulated settlement outcomes in 10 markets. After the team promptly revoked permissions, the attackers did not successfully withdraw funds; the relevant markets have been voided and refunds are being processed.