Crypto Attacks: Phishing Scams, Wallet Compromises, and Software Supply Chain Hacks

Three major cryptocurrency attacks have been reported in the past 24 hours, with varying degrees of sophistication and financial impact.

The first attack targeted SecondFi, a blockchain platform that warned its users about phishing scams. Fraudsters impersonated SecondFi by creating fake browser extensions and applications designed to steal cryptocurrency or access user wallets. To clarify, SecondFi's team stated that there is no new application or link, and users should only install the official Chrome extension with a blue verified checkmark.

In another case, blockchain investigator ZachXBT discovered that an early Solana (SOL) whale wallet was compromised, resulting in the theft of 180,900 SOL worth $14.2 million. The attacker allegedly took over the staked assets before transferring them to new Solana addresses and eventually bridged the funds to Ethereum (ETH) to obscure transaction trails.

The third attack involved a software supply chain hack on jscrambler's npm package, which allowed an attacker to steal login credentials for releasing new versions. The malicious releases included an infostealer payload that ran code on Linux, macOS, or Windows systems, and the developer team recommended updating to version 8.22.0 to fix the issue.