tam

Security company GoPlus released a vulnerability analysis on social media, stating that the prediction market platform Polymarket's international site experienced a user asset theft incident. The RUM script from third-party performance monitoring service DebugBear was compromised by supply chain attacks, delivering malicious code to user pages and abusing their trading and signing permissions.On-chain analysis shows that the main path involved 710 DepositWallets and 731 addresses, with losses of approximately 2.71 million dollars; the number of addresses does not represent the actual number of users. Polymarket's official statement later indicated that the issue has been resolved and services have been restored, while also promising full compensation to affected traders, with the actual compensation progress to be based on subsequent official announcements.

Smart contract developer Justin Kalland posted on X, indicating that the Binance hacker may have made a potential mistake, and MetaMask should retain any Web2 logs it can access as much as possible. He stated that the hacker sent 175 million USDT to a new wallet, and about 2.5 minutes later, that wallet received 2 ETH, likely used to pay for gas fees, which aligns with the usage pattern of other attack wallets.Kalland noted that exactly two minutes later, the wallet used MetaMask's Gas Station service, even though there were already gas fees at that time. Three consecutive transactions appeared in the same block, including an ETH deposit from the Gas Station, an unlimited USDT authorization to the Kyber Network router, and a payment of 127.67 USDT to the Gas Station. The amount of this ETH deposit perfectly matched the maximum gas budget after combining the Kyber authorization and USDT payment, down to the wei.Kalland stated that the ETH held by the wallet at that time was sufficient to cover the aforementioned fees, reasonably inferring that the user was using the MetaMask wallet and mistakenly selected USDT to pay for gas fees due to haste. Using the MetaMask Gas Station requires going through MetaMask Sentinel, and the transaction is broadcasted by it rather than through conventional RPC, meaning that related interactions likely left off-chain records that may contain IP metadata. Among the checked attacker wallets, this is the only one that showed the use of the Gas Station, with the address 0xAa246BF639586a6Ba46762D378CE50cA4fc654a0.

According to an announcement from the Singapore Police Force's official website, the Singapore police have issued a warning stating that since September 10, they have received at least two reports related to tampered Ledger cryptocurrency hardware wallets, with total losses amounting to approximately 3.5 million Singapore dollars. Preliminary investigations indicate that some Ledger hardware wallets purchased at retail stores in Singapore contained malicious hardware components that could steal users' mnemonic phrases or private keys, and transfer assets without the users' knowledge.The police have contacted Ledger, which is reviewing the related cases, and the investigation is ongoing. The police advise users to stop using suspected tampered devices and to generate new mnemonic phrases with unaffected devices, transferring any remaining assets. Zhao Changpeng shared this news on the X platform, reminding Singapore users to be especially cautious.

MetaMask has set Stellar as the default network for mobile applications and browser extensions. Existing multi-chain accounts will receive Stellar addresses derived from their mnemonic phrases and will support XLM, USDC, and Soroban tokens.

The Singapore Police Force issued a warning on Wednesday, stating that since September 10, they have received at least two reports involving tampered Ledger hardware wallets, resulting in a total loss of approximately 3.5 million Singapore dollars, equivalent to about 2.7 million US dollars. Preliminary investigations found malicious hardware components in Ledger wallets purchased from certain retail stores in Singapore.The incident only came to public attention on October 9, involving devices sold through authorized dealers CryptoBilis in Indonesia, Malaysia, and the Philippines. Subsequently, former Mt. Gox CEO Mark Karpelès stated that a Ledger Flex purchased at Singapore airport contained a spy implant. Another user reported acquiring a tampered device from local IT retailer Challenger, and later received a new device sent by Ledger.On October 13, Ledger requested retailers in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend sales of their devices pending the completion of the investigation. The Singapore police stated they are in contact with Ledger, which is reviewing the affected cases, and the police investigation is ongoing.

According to Catcher Predict monitoring, in the predicted market Polymarket for the event "Milwaukee Brewers vs. Tampa Bay Rays," the option "Tampa Bay Rays" in the sub-market "First 5 Innings Spread -1.5" experienced a drastic fluctuation in winning probability, dropping from 27.5% an hour ago to the current 12% (a fluctuation of 15.5%). Please note the impact of relevant breaking news.

According to Catcher Predict monitoring, in the market prediction event "Tampa Bay Rays vs. Milwaukee Brewers" on Polymarket, the "Over" option in the sub-market "Tampa Bay Rays O/U 4.5" has experienced a dramatic fluctuation in winning probability, dropping from 57% an hour ago to the current 23.5% (a fluctuation of 33.5%). Please note the impact of related breaking news.

According to Catcher Predict monitoring, in the market prediction event "Tampa Bay Rays vs. Milwaukee Brewers" on Polymarket, the option "Milwaukee Brewers" in the sub-market "Spread -1.5" has experienced a dramatic fluctuation in winning probability, soaring from 38% an hour ago to the current 84% (a fluctuation of 46%). Please note the impact of related breaking news.

According to Catcher Predict monitoring, in the market prediction event "Cleveland Guardians vs. Tampa Bay Rays" on Polymarket, the "Over" option in the sub-market "O/U 6.5" experienced a sharp fluctuation in winning probability, plummeting from 53.5% an hour ago to the current 37.5% (a fluctuation of 16%). Please note the impact of related breaking news.

According to Catcher Predict monitoring, in the market prediction on Polymarket for the event "Tampa Bay Rays vs. Cleveland Guardians," the option "Tampa Bay Rays" in the sub-market "Tampa Bay Rays vs. Cleveland Guardians" experienced a dramatic fluctuation in winning probability, soaring from 56.5% an hour ago to the current 88.5% (a fluctuation of 32%). Please note the impact of relevant breaking news.

According to Catcher Predict monitoring, in the market prediction event "Tampa Bay Rays vs. Cleveland Guardians" on Polymarket, the option "Tampa Bay Rays" in the sub-market "Spread -1.5" experienced a sharp fluctuation in winning probability, soaring from 36.5% an hour ago to the current 58.5% (a fluctuation of 22%). Please note the impact of related breaking news.

According to Catcher Predict monitoring, in the market prediction event "Tampa Bay Rays vs. Cleveland Guardians" on Polymarket, the "Tampa Bay Rays" option in the sub-market "Tampa Bay Rays vs. Cleveland Guardians" has experienced significant fluctuations in winning probability, soaring from 44.5% an hour ago to the current 59.5% (a fluctuation of 15%). Please note the impact of related breaking news.

The founder of the hardware wallet OneKey, Yishi, announced the launch of a tool to detect whether hardware wallets have been tampered with, called tampered.app. Users can upload photos of the circuit board for detection, supporting OneKey, Ledger, and Trezor, free of charge, without registration, and without saving photos.The tool can mark suspected anomalies, but a normal result does not guarantee complete safety. Yishi stated that tests on approximately 400 photos submitted by users showed an accuracy rate of over 95%.

According to Catcher Predict monitoring, in the market prediction event "Cleveland Guardians vs. Tampa Bay Rays" on Polymarket, the "Over" option in the sub-market "O/U 6.5" has experienced a drastic fluctuation in winning probability, dropping from 52.5% an hour ago to the current 24.5% (a fluctuation of 28%). Please note the impact of related breaking news.

According to Catcher Predict monitoring, in the prediction market Polymarket for the event "Cleveland Guardians vs. Tampa Bay Rays," the option "Tampa Bay Rays -1.5 in the first five innings" has experienced significant fluctuations in win probability, rising from 34.5% an hour ago to the current 50% (a fluctuation of 15.5%). Please note the impact of related breaking news.

Cryptocurrency community user Johannes posted that he found suspected spyware and hardware modifications, including additional cables and LTE modules, in two Ledger hardware wallets purchased at different stores of the European retailer MediaMarkt, and called for Ledger to immediately recall the related products.Johannes stated that MediaMarkt employees confirmed that the second device was not a returned item, as returned Ledger products would be sent directly back to the manufacturer rather than resold as new. Store records show that the relevant inventory came from the supplier Aqipa GmbH. Since the company operates distribution in Europe, Johannes suspects that the issue may involve a broader retail inventory, but there is currently no evidence to confirm that Ledger's supply chain has been widely compromised in Europe.Johannes mentioned that he has handed over the first device for analysis and plans to send the second device to Ledger for investigation, while also releasing an unboxing video as evidence. He reminded users that if they purchase devices from merchants outside of Ledger's official channels, they should check for any abnormalities in the devices. Currently, the above claims mainly come from this user's personal disclosure, and the reasons for the device damage, the scope of impact, and whether it involves a supply chain attack still need to be verified by Ledger and other relevant parties.

Zhao Changpeng issued a reminder for Ledger hardware wallet users to remain vigilant, especially those who have purchased devices recently. According to the information currently available, this incident appears to be limited to the supply chain, involving a supplier, and a few users may have purchased counterfeit or tampered Ledger devices.Zhao Changpeng stated that Ledger is a well-established and relatively secure hardware wallet brand in the industry, but such incidents can still occur. He anticipates and calls for the BNB ecosystem and the entire cryptocurrency industry to assist in tracking the stolen funds and promoting recovery.Previously, Ledger confirmed that it is investigating an asset theft incident involving Southeast Asian users, who had purchased devices through the distributor CryptoBilis. Ledger has requested CryptoBilis to suspend sales and shipments and advised users who purchased devices through this distributor in the past 90 days not to initialize their devices; if they have already completed the setup, they should create a new Ledger signing device using a new mnemonic phrase and transfer their assets to the new wallet.On-chain investigator Specter estimates that this incident has led to the theft of hundreds of wallets on the Bitcoin, Ethereum, and TRON networks, with losses exceeding 86 million dollars. Security researcher tanuki42 previously estimated the losses to be over 72 million dollars and stated that the amount is still increasing. Currently, the specific cause of the incident and whether the involved devices have security vulnerabilities are still under investigation.

According to Catcher Predict monitoring, in the market prediction event "Tampa Bay Rays vs. New York Yankees" on Polymarket, the option "Tampa Bay Rays" in the sub-market "Tampa Bay Rays vs. New York Yankees" experienced significant fluctuations in winning probability, soaring from 32.5% an hour ago to the current 55.5% (a fluctuation of 23%). Please note the impact of related breaking news.

According to Catcher Predict monitoring, in the market prediction event "New York Yankees vs. Tampa Bay Rays" on Polymarket, the "Over" option of the sub-market "O/U 6.5" has experienced a dramatic fluctuation in winning probability, soaring from 38.5% an hour ago to the current 81% (a fluctuation of 42.5%). Please note the impact of related breaking news.

The Ethereum staking withdrawal queue has retreated from last week's peak. After MetaMask began withdrawing validators, the withdrawal queue once climbed to about 851,000 ETH, and is currently down to about 767,000 ETH. Previously, on September 29, the queue was only about 166,000 ETH, growing more than five times in just a few days, reaching about 2% of the total staked ETH of approximately 43.6 million.On September 30, MetaMask disclosed a security incident affecting some of its infrastructure and took the affected validators offline as a precaution. Its update on October 1 stated that the investigation found no signs of impact on wallets or customer funds. In addition to its wallet services, MetaMask also operates validators for the staking service provider Lido. Ethereum security researcher Kaden estimates that this precautionary withdrawal involves about 17,000 validators and approximately 523,000 ETH, although MetaMask has not confirmed this data.Lido expects that as the affected validators withdraw and their balances are extracted, these ETH will gradually be restaked, a process that may take about 45 days. During the downtime, the affected validators will miss out on rewards, and Lido stated that stETH holders do not need to take any action. Meanwhile, the demand for entering the staking queue has cooled, with about 1.5 million ETH waiting to enter, and the estimated waiting time is about 25 days.