SlowMist Cosine: GMGN hackers stole user funds by withdrawing from the Pixiu trading platform, making a profit of over $700,000
SlowMist Cosine posted on X platform, saying: "After reviewing the dozens of stolen intelligence reports related to GMGN submitted to us, the commonality is: users' private keys were not leaked, but SOL BNB were all bought into the Pixiu pool (meaning they can only be bought and not sold). Hackers mainly took away users' funds by withdrawing from the Pixiu pool, making profits of over 700,000 USD. The cause of this situation (not private key leakage) is probably a more advanced phishing method. Since GMGN has already fixed the related issues, it is not easy to reproduce. It is speculated to be related to the GMGN account mode. Users visit phishing websites, where the phishing websites obtain the user's GMGN account mode login signature information, such as access_token and refresh_token values, take over the user's account permissions, but without the user's 2FA, they cannot directly export private keys or withdraw funds. Therefore, they use the Pixiu pool to achieve "cross-trading" attacks on user funds, indirectly stealing user assets."
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Hong Kong’s SFC Sets Clear Crypto Guidelines to Draw Investment and Protect Investors
- Hong Kong's SFC proposes crypto regulatory guidelines to address corporate holdings transparency gaps and support digital asset innovation. - The initiative targets investor protection by mandating disclosure of crypto reserves, governance structures, and risk mitigation strategies for listed firms. - Driven by rising corporate adoption of crypto as treasury diversification tools, the rules aim to standardize practices amid market volatility and opaque disclosures. - Hong Kong's framework aligns with glo
Bitchat's Mesh Network Demonstrates Strength Amid Jamaica's Failing Infrastructure
- Bitchat, Jack Dorsey's decentralized messaging app, became Jamaica's second-most downloaded app during Hurricane Melissa's infrastructure collapse. - The Bluetooth mesh network app enabled encrypted offline communication as 70% of Jamaica's internet connectivity was lost. - Bitchat's "location notes" feature helped mark safe zones while similar surges occurred in Nepal, Indonesia, and Madagascar during crises. - EU's Chat Control law debates over encryption surveillance contrast with Bitchat's decentrali
Solana News Update: Circle Boosts Solana DeFi Liquidity with $500M USDC Infusion
- Circle injected $500M in USDC on Solana via two $250M mints, boosting liquidity for DeFi and institutional activity. - Solana's high TPS and low fees position it as a key stablecoin hub, with USDC's compliance enhancing trust in DeFi infrastructure. - Market response showed increased DEX volumes and whale investments, signaling growing institutional confidence in Solana's ecosystem. - Circle's multichain strategy and regulatory engagement aim to solidify USDC's dominance over USDT while navigating evolvi
Trending news
MoreCrypto prices
More
