cosine

The founder of Slow Fog, Yu Xian, retweeted a tweet on the X platform regarding the potential poisoning attack risks of Claude Code and published an analysis of the poisoning attack details targeting Grok Build CLI and Claude Code CLI.It pointed out that the security mechanisms of Grok Build CLI are not unified, with different code paths having different trust assumptions, creating gaps that serve as channels for attackers. Attackers may execute arbitrary commands through malicious project configuration files without the user's knowledge, thereby stealing API keys, cloud credentials, or controlling local devices.Researchers constructed a testing environment and found that on Mac systems, if Claude Code is affected, executing specific test commands can trigger the local calculator to launch, proving the existence of potential command execution risks.If the attack is successful, attackers may further steal API keys from AI services like Claude and OpenAI, resulting in account cost losses, gain access to servers and data by obtaining cloud service credentials from AWS, Alibaba Cloud, Tencent Cloud, modify code repositories to implant backdoors, and use local devices as jump points to attack corporate internal networks. It is reported that the related vulnerabilities have existed for a year.

The founder of Slow Fog, Yu Xian, posted on the X platform to interpret the Squid security incident. He stated that sampling found that the related Safe wallets were all single-signature, and the owners were all different, but the issue was not with the private keys; the problem lay in the modules (SquidRouterModule) used by these Safe addresses, which had vulnerabilities. Attackers could forge messages, easily bypass relevant validations, and initiate subsequent exchange operations to transfer funds from the target Safe wallet. In addition, Yu Xian also disclosed information about the address where the attackers' profits were deposited.Previously, it was reported that a third-party Gnosis Safe module was exploited on Base and Ethereum, resulting in a loss of approximately $3.2 million, with the victims being 86 Gnosis Safes that had added this contract as a trusted Safe Module. The contract was named "SquidRouterModule" on Basescan, and subsequently, Squid clarified that it was not affected by the Gnosis Safe-related vulnerability incident.

Yuxian, the founder of Slow Fog, posted on the X platform stating that Coinbase has taken down the page requiring users to enter their plaintext mnemonic phrases. He pointed out that the security model of online web pages for wallets is very low, much lower than that of extensions or apps; the practice of collecting plaintext mnemonic phrases on online web pages can easily be imitated by phishing websites and has long been a common phishing technique.

Slow Fog's Yu Xian posted on platform X: "A group hacking incident is occurring, hacker address: 0x913efc2062984288a0a083cd42b3a3422c07fcef, the hacker has currently profited $85,000, and this amount is still increasing. According to community feedback, this group mainly consists of yield farmers, and private keys/mnemonic phrases have been collected in advance by the hacker. The hacker is consolidating related funds. If you are using the MoreLogin fingerprint browser, please be cautious, but there is currently no evidence that MoreLogin or related plugins are the issue."

The founder of Slow Fog, Yu Xian, posted on the X platform: "I don't trust the stability or resilience of OpenClaw, but I am quite confident in Claude Code, as this is one of the core goals of software engineering. In terms of security emphasis, both companies place a high priority on security, and submitted vulnerabilities receive timely feedback. Some OpenClaw forks or reference versions show much less enthusiasm for security.In terms of security scenarios, although OpenClaw also has a Sandbox mechanism and attempts to design more granular permissions for tools, as its name 'OpenClaw' suggests, 'Open' is its greatest charm. A constrained OpenClaw is no longer OpenClaw. We hope for it to be free while also wanting it to be controllable, which is a point of contention for everyone. However, in a real production environment, an overly free OpenClaw can easily get out of control."

The founder of Slow Fog, Yu Xian, issued a security reminder, urging users to be vigilant against prompt injection attacks in agents md/skills md/mcp when using AI tools. There have already been related cases.Once the dangerous mode of AI tools is activated, the relevant tools can fully control the user's computer without any confirmation. However, if the dangerous mode is not activated, each operation will require user confirmation, which will also affect usage efficiency.

The founder of Slow Fog, Yu Xian, posted on the X platform stating that they are following up on the DeBot incident, monitoring the on-chain situation. The private keys related to DeBot have been stolen, and the hacker has currently profited $255,000 in assets, with ongoing thefts. If you are using DeBot and the private key is assigned by DeBot, then this private key is at risk.

The founder of Slow Fog, Yu Xian, tweeted that the new version of the Trust Wallet browser extension has completely resolved the backdoor issue and no longer contains PostHog-related code. Previously, due to incorrect data from intelligence sources, it was mistakenly believed during analysis that PostHog had not been completely removed.PostHog is an open-source full-chain product analytics platform that can be used to collect various information for analysis. The Trust Wallet browser extension version 2.68.0 had a backdoor that utilized PostHog.

Slow Mist's Yu Sin stated on platform X that the Slow Mist team discovered serious vulnerabilities on two trading platforms (directly affecting fund security), but they were unable to reach anyone, and public contact received no response.Yu Sin also mentioned that one of these trading platforms has a 24-hour trading volume of $3.7 billion, while the other has $240 million. The Slow Mist team's account tweeted that they had proactively contacted a trading platform named "ICRYPEX Global" yesterday.

The founder of Slow Fog, Yu Xian, analyzed the "He Yi WeChat account theft" incident, stating that this account theft likely occurred because hackers took control of a user's long-abandoned phone number, thereby taking over the identity infrastructure linked to the WeChat account. Another common risk is social engineering attacks involving verification codes: after obtaining the leaked account password, hackers impersonate the user to request a 6-digit verification code from two of the user's frequently contacted WeChat friends, thus completing the account theft.Yu Xian pointed out that the prerequisites for the attack include matching account passwords from already leaked data and prior collection of information about the victim's frequently contacted friends (including users with whom there has only been interaction in group chats). Attackers often choose to execute their plans late at night, which is common in OTC scams targeting cryptocurrency users.He reminded users to be cautious when adding unfamiliar WeChat friends, to change their passwords in a timely manner, and to pay attention to various risk alerts from WeChat.

Slow Fog's cosine posted on platform X, stating that user Babur encountered a theft incident involving $27 million worth of cryptocurrency assets. According to analysis, the stolen assets mainly involve two addresses: Solana address 91xu and Ethereum Safe multi-signature address 0xD2, with the two largest stolen assets totaling over $18 million.The hacker addresses are 71fM (Solana) and 0x4f (Ethereum), with some funds already cross-chain to the Ethereum network. This incident is suspected to have been caused by a poisoned computer, where the user double-clicked to run a malicious file, leading to the leakage of private keys, including two signing private keys of the Safe multi-signature that may have been stored on the infected computer.

Slow Mist's Yu Xian @evilcos reminds that Web3 job seekers have encountered malicious code traps during interviews. In this incident, the attacker impersonated @seracleofficial and asked the job seeker to review and run code from Bitbucket. After the victim cloned the code, the program immediately scanned all local .env files and stole sensitive information such as private keys.Slow Mist pointed out that such backdoors are typical stealers, capable of collecting privacy data like saved passwords in browsers, encrypted wallet mnemonics, and private keys. Experts emphasize that any suspicious code review must be conducted in an isolated environment to avoid running it directly on real devices and falling victim to attacks.

The founder of Slow Fog, Yu Xian, tweeted that the "white hat negotiation" message that appeared on-chain after the Yearn attack is fabricated and is actually a phishing attempt, consistent with the previous Balancer incident.The attacker used the Railgun protocol to hide their identity, prepared a low Gas address 28 days in advance, and completed the exploit, ultimately transferring 1,000 ETH through Tornado Cash. The current attacker address still holds about 6 million dollars in cryptocurrency assets.

According to Slow Mist's Yu Sin, some users may not have received the Monad airdrop and are advised to check whether the wallet address bound on the airdrop claim page claim.monad.xyz is the expected address.Yu Sin stated that if the bound address is not what the user expected, they may have encountered a similar issue as user Onefly (@Onefly) — the wallet address was bound to a hacker's address, causing the official airdrop to be sent to the hacker. Yu Sin revealed that a white hat hacker had previously synced a related vulnerability with him, which has a prerequisite: if someone hijacks the user's session on the Monad airdrop claim page, they can change the claim wallet address without further confirmation.

Slow Fog stated on the X platform that the theft of GANA was caused by the leakage of the owner private key of the GANA Payment Stake contract. The subsequent attack used some techniques, such as the utilization of 7702 delegate, which conveniently bypassed the onlyEOA check for unstaking. By changing the relevant Rate and Fee, the attacker was able to achieve the result of unstaking hundreds of USDT while only staking a few hundred USDT.

The founder of Slow Fog, Yu Xian, tweeted, "Friends using the open-source automated trading system NoFx should pay attention. The risks we disclosed have led to real theft incidents, and some users' wallet private keys and CEX/DEX API Keys have been leaked. To minimize the risks, we have collaborated with relevant security teams to notify affected users as much as possible before releasing this article to disclose the details."

According to reports from users on platform X, an imToken wallet user encountered the theft of 112 BNB while participating in the Binance TGE event.Security expert Slow Mist's Yu Xian @evilcos conducted a preliminary analysis of on-chain data and found that the hacker address (0x8AeB0171742AC50d20884997F9f5009a233216D5) has caused financial losses for at least 7 users. The attack pattern indicates that the hacker may have conducted a planned attack by obtaining the mnemonic phrase or private key, with victims typically having their assets transferred shortly after depositing large amounts of funds. The security team has begun to mark and blacklist the relevant hacker addresses and is continuously monitoring the situation.

ChainCatcher news, according to SlowMist's cosine analysis, the attack on the cross-chain bridge project 402Bridge originated from a private key leak, and the possibility of insider involvement cannot be ruled out.The domain 402 bridge.fun was registered only two days before ceasing operations, and there has been no further movement of the stolen funds. This is the first public security incident related to the 402 protocol services, and SlowMist's cosine stated that this incident is not a typical case of collective wrongdoing by the project team.

ChainCatcher message, Slow Mist Cosine posted a security reminder on social media stating that there are cases of poisoning AI, and advised users not to trust AI-generated code, especially when handling sensitive operations.Cosine suggested that mature and well-known open-source code should be prioritized, but at the same time, attention should be paid to supply chain poisoning risks. Another security approach is to compare the open-source implementations of well-known wallets (including hardware wallets) to ensure security through extensive observation and comparison.

ChainCatcher message, in response to community users claiming that the FTX fake compensation email mentioned needing to download a tool to generate XPUB, Slow Mist founder Yuxian responded on platform X: "This malicious tool appears to be pieced together using AI, and the intent to steal mnemonic phrases is very, very clear. The malicious Telegram bot is ftxsexxerbot."