socket

Сообщение ChainCatcher, согласно отчету Decrypt, компания безопасности Socket опубликовала результаты исследования, в котором 77 расширений Firefox были связаны с их так называемой "фабрикой кражи кошельков", из которых 40 были подтверждены как злонамеренные.Эти расширения маскируются под Web3 продукты, такие как OKX, Rabby Wallet, TronLink, вводя пользователей в заблуждение, чтобы они импортировали свои кошельки, или используя модифицированный код настоящих кошельков, чтобы украсть мнемонические фразы и приватные ключи во время ввода. Записи о подписи Mozilla показывают, что эта активность продолжалась с 9 марта по 3 августа, и на момент отчета Socket все еще оставалось несколько расширений в сети.Примерно половина из этих расширений демонстрирует реалистичный интерфейс кошелька и требует от пользователей импортировать существующий кошелек, тем самым перехватывая введенные мнемонические фразы или приватные ключи; еще 13 являются модифицированными версиями Rabby, которые, работая нормально, отправляют данные учетных записей, хранящихся в кошельке, на внешние серверы; еще 5 специально собирают сохраненные учетные данные и содержимое буфера обмена.Кроме того, 37 расширений маскируются под генераторы паролей, переключатели темного режима, VPN, конвертеры валют и инструменты для заметок, но на самом деле работают как приложения для спортивных счетов, которые используют одни и те же жестко закодированные учетные данные. 9 подтвержденных злонамеренных расширений изначально были выпущены в виде приложений для счетов по футболу, баскетболу и т.д., а последующие обновления заменили их на код кражи кошельков.Socket назвала эту активность "фабрикой кражи кошельков", но предупреждает, что не все расширения подтверждены как контролируемые одним и тем же оператором. Команда Socket заявила, что любые пользователи, которые вводили мнемонические фразы или приватные ключи в этих расширениях, должны считаться "постоянно скомпрометированными" и немедленно перевести свои средства на новый кошелек, так как удаление расширения не отменяет уже отправленные в другое место мнемонические фразы.

Binance announces the upgrade of the U-based contract WebSocket URL architecture to support traffic growth and enhance overall stability and scalability. The new architecture is divided into three specialized base URLs by data category: Public (high-frequency public market data), Market (regular market data), and Private (user data stream).The new WebSocket URL is available for use starting today, and the old URL will be permanently decommissioned on April 23, 2026. Additionally, this upgrade continues to support both ws and stream access modes and combined subscriptions.

According to a report by Cointelegraph, cybersecurity company Socket disclosed in a report released on Tuesday that a malicious Google Chrome extension named Crypto Copilot allows users to trade on the Solana blockchain through X social media posts while secretly siphoning fees from each transaction exchange into the creator's wallet.The extension uses the decentralized exchange Raydium to execute exchange operations for users, while attaching a hidden transfer instruction that moves Solana coins from the user's account to the attacker's account. Unlike typical malware that attempts to steal the entire wallet balance, this extension siphons at least 0.0013 Solana coins (approximately 0.05% of the transaction amount) from each transaction. The user interface only displays transaction exchange details, and the wallet confirmation interface summarizes the transaction without showing specific instructions, leading users to believe they are only signing a transaction exchange when, in fact, they are simultaneously authorizing both the exchange and the fund transfer operations.Although the extension has only accumulated 15 users since its release on June 18, 2024, it still exposes security vulnerabilities within the browser extension ecosystem.

According to Cointelegraph, cybersecurity company Socket has discovered a malicious Chrome extension called "Crypto Copilot" that is secretly stealing funds from users' Solana transactions.The extension allows users to conduct Solana transactions directly from the X social media platform, but it injects additional instructions into each transaction, siphoning off at least 0.0013 SOL or 0.05% of the transaction amount. Unlike typical wallet-draining malware, Crypto Copilot executes transactions using the Raydium decentralized exchange while adding a second instruction to transfer SOL to the attacker's wallet, with the user interface only displaying a transaction summary, hiding the separate operational instructions. Since its release on June 18, 2024, the extension currently has only 15 users. Socket has submitted a takedown request to the Chrome Web Store security team. Security experts warn users that the Chrome extension ecosystem has long been a popular target for cryptocurrency scams due to its large user base and scalable design.

ChainCatcher message, the Socket Security Research Team has discovered four malicious npm packages that target Binance Smart Chain (BSC) and Ethereum users' wallets. These packages are pancake_uniswap_validators_utils_snipe (350 downloads), pancakeswap-oracle-prediction (445 downloads), ethereum-smart-contract (305 downloads), and env-process (1,054 downloads), with a total download count exceeding 2,100.The attackers use obfuscated JavaScript code to calculate the percentage of the target wallet balance and attempt to transfer up to 85% of the assets to a wallet address under their control.

ChainCatcher message, according to the official announcement, the Binance contract coin-based Websocket will undergo a system upgrade on October 10, 2024, at 14:00 (UTC+8). The upgrade is expected to take 6 hours. The main content of this upgrade includes:Improving the performance and stability of the Binance coin-based contract WebSocket serverDuring the upgrade, there may be disconnections from the Binance coin-based contract WebSocket server or brief data loss. In such cases, API users can reconnect to the coin-based contract WebSocket.During the system upgrade, coin-based contract trading will not be affected.

ChainCatcher message, according to the official announcement, the Binance contract coin-based WebSocket will undergo a system upgrade on September 26, 2024, at 14:00 (UTC+8), with an estimated upgrade duration of 8 hours.The main content of this upgrade:Improve the performance and stability of the Binance coin-based contract WebSocket serverDuring the upgrade, there may be disconnections from the Binance coin-based contract WebSocket server or brief data loss. If this occurs, API users can reconnect to the coin-based contract WebSocket.During the system upgrade, coin-based contract trading will not be affected.

ChainCatcher message, according to the official announcement, Binance will update the request weight adjustment and WebSocket user data requests on September 3, 2024, at 14:00 (UTC+8). Binance encourages users to switch to the updated version endpoint for better performance and functionality.

ChainCatcher news, according to official sources, OpenSea has partnered with the cross-chain interoperability protocol Socket, allowing users to seamlessly perform token cross-chain transfers and exchanges on OpenSea, supporting networks such as Ethereum, Arbitrum, Optimism, Base, and Polygon.

ChainCatcher news, the cross-chain interoperability protocol Socket has announced a customer compensation plan in response to the hacking incident, offering 100% compensation to all affected users.It is reported that Bungee, the bridging aggregator developed by Socket, was hacked last week, resulting in a loss of approximately $3.3 million. After statistics, Socket stated that the incident affected a total of 232 users and involved 5 types of assets. Earlier this week, Socket has recovered 1,032 ETH, worth about $2.2 million, and to fully compensate user losses, Socket will also contribute an additional $1.1 million for compensation.

ChainCatcher news, the blockchain interoperability protocol Socket tweeted that it has recovered 1,032 ETH from the funds involved in the hacking incident and will soon release a recovery and distribution plan for users.

ChainCatcher message, MetaMask posted on platform X stating that MetaMask Bridge users are not affected by the Socket vulnerability. MetaMask pointed out that it adopted a unique architecture when designing its cross-chain bridge contracts, aimed at preventing such attacks.

ChainCatcher message, interoperability protocol Socket has published a security incident update on X: Socket is now back up and running, affected contracts have been paused, and losses have been fully controlled. The bridging of Bungee and most of its partner frontends has been restored. A detailed post-mortem analysis and follow-up steps will be announced soon.Socket also stated: "Be cautious of fake Socket accounts attempting to phishing you in replies. Please make sure to verify accounts carefully before taking any action."

ChainCatcher news, according to on-chain analyst Yu Jin's monitoring, the attacker of the cross-chain protocol Socket has exchanged the stolen USDC and USDT stablecoins for 1,137 ETH at an average price of $2,564.

ChainCatcher news, according to monitoring by Shield, the cross-chain protocol Socket has been attacked, with at least 3.3 million dollars in funds stolen. The hacker exploited a bad route to steal user funds from the SocketGateway contract.

ChainCatcher news, the cross-chain protocol Socket Protocol announces the completion of a $5 million financing round, with participation from Coinbase Ventures and Framework Ventures. The new funds will be used to expand the collaboration between Socket and Coinbase, including providing cross-chain services for developers and users of Coinbase Wallet and the Base network.

ChainCatcher message, MistTrack releases update on Bit Browser attack incident:The hacker transferred a total of 6.5 Ethereum to 0x9713...039a on zkSync Era.The hacker bridged to Arbitrum via Socket and transferred 1 ETH to TornadoCash on Arbitrum.The hacker bridged 5.3 ETH to the address 0x9c00...8143 on Optimism via Socket.The address 0x9c00...8143 on Optimism transferred 5.2 ETH to the Binance address 0x506f...8845.83 AVAX have been frozen.A total of 80.97 ETH has been transferred to Railgun on Arbitrum.

ChainCatcher news, the open-source code vulnerability detection tool Socket announced the completion of a $20 million Series A financing round, led by Andreessen Horowitz (a16z), with participation from Abstract Ventures, Wndrco, Unusual Ventures, and angel investors including Box co-founder Aaron Levie, Figma co-founder Dylan Field, Okta co-founder Frederic Kerrest, Vercel CEO Guillermo Rauch, and Eventbrite co-founders Julia and Kevin Hartz. The new funds will be used to expand the team and support the integration of more programming languages.According to reports, its CEO Feross Aboukhadijeh stated that the newly raised funds, combined with the previous $4.6 million seed investment, bring the company's total financing to $24.6 million.