ChainCatcher news, the new chairman of the U.S. Securities and Exchange Commission, Paul Atkins' X account is suspected to be hacked, posting the contract address of a Meme coin on the Solana chain and then deleting the tweet. Users should be cautious.

ChainCatcher news, according to a report by Reuters, the North Korean hacker group Lazarus Group has registered multiple companies in the United States for cyber attacks targeting cryptocurrency developers. According to a report by cybersecurity firm Silent Push, the hackers registered companies such as Blocknovas LLC and Softglide LLC in New Mexico and New York, using false identities and addresses to distribute malware through fake job opportunities. The FBI has seized the Blocknovas domain, stating that it was used to deceive individuals and spread malicious programs. This behavior violates the sanctions imposed by the U.S. Treasury and the United Nations against North Korea.

ChainCatcher news, according to Slow Fog's Yu Xian, the previous incident where $5 million worth of ZK tokens were stolen due to the leakage of the administrator's private key has been resolved, and the stolen funds have been fully recovered. It is reported that during the handling of the incident, Matter Labs, the maintainer of the sole sequencer for ZKSync, intervened with the hacker's address and successfully restricted the transfer of 70% of the stolen funds. Matter Labs stated that the reason for the intervention was that the stolen ZK tokens were directly related to protocol governance.Yu Xian said, "I understand, but I feel a bit regretful about some previous theft incidents on ZKSync that were not 'internal matters'."

ChainCatcher news, according to Fortune, the decentralized trading platform Theo has completed a total of $20 million in funding. This round of financing consists of two parts: a $4.5 million seed round led by quantitative investment firm Manifold Trading completed in March 2024, and a recently completed $15.5 million funding round led by cryptocurrency investment firms Hack VC and Anthos Capital.Theo was founded by three former employees from high-frequency trading firms Optiver and IMC Trading. The platform allows ordinary investors to use trading strategies that are typically reserved for top high-frequency trading companies.

ChainCatcher news, according to KiloEx announcement, for the security incident that occurred between April 14, 18:27 to 19:40 UTC, the platform will launch differentiated compensation measures for affected users. Traders will receive full compensation for reduced profits or increased losses during the downtime, and it is recommended to close positions as soon as possible after the platform resumes; Hybrid Vault stakers will not lose their principal and earnings, and can participate in the 10% annualized additional earnings activity from April 24 to May 24; VIP users will receive a level +1 reward and a 30-day VIP protection period.

ChainCatcher news, according to the announcement made by ZKsync on platform X and the Ethereum network, calls for the hacker to return 90% of the stolen funds (44,687,278.5988 ZK tokens, 1,021.3 ETH, and 766 ETH), and offers a 10% bounty as a reward for cooperation.The funds must be sent to the designated ZKsync Era and Ethereum addresses within 72 hours. Completing the above refund before the deadline will be publicly confirmed and closed; otherwise, it will be handed over to law enforcement for a criminal investigation.

According to ChainCatcher's message, KiloEx stated in a post that the root cause analysis and summary of the hacking incident revealed that the incident was caused by its smart contract's TrustedForwarder contract inheriting OpenZeppelin's MinimalForwarderUpgradeable but failing to override the execute method, which allowed the function to be called arbitrarily.The attack occurred between April 14, 18:52 and 19:40 (UTC), with the hacker deploying attack contracts across multiple chains including opBNB, Base, BSC, Taiko, B2, and Manta. After negotiations, the hacker agreed to retain 10% of the bounty and has returned all stolen assets (including USDT, USDC, ETH, BNB, WBTC, and DAI) to the multi-signature wallet designated by KiloEx.

According to ChainCatcher, as reported by crowdfundinsider, the Supreme Court of India dismissed the petitions of 54 victims of the WazirX hacking incident on April 16, 2025, on the grounds that cryptocurrency regulation falls under government policy rather than judicial jurisdiction. The hack occurred on July 18, 2024, resulting in over $235 million in user funds being stolen. The victims requested a criminal investigation into WazirX, its co-founder Nischal Shetty, Binance, and the custodian provider Liminal, but the court stated it could not intervene in the absence of a clear regulatory framework. WazirX has proposed a restructuring plan to return 85% of the stolen funds and issue recovery tokens for the remaining portion.

ChainCatcher message, KiloEx announced that they will work with the SlowMist team to provide a post-incident summary, which will disclose more details and future security plans. Thanks again to Zhao Changpeng, Binance, and BNB Chain for their immediate assistance in establishing the initial war room, contacting security companies and partners to jointly address this incident.

ChainCatcher message, after the Binance security team assisted in recovering the stolen funds from KiloEx, some community members suggested that Binance disclose specific support details regarding the incident to enhance community trust in the ecological security. In response, Zhao Changpeng stated: "Some details in the middle can help with the handling of future security incidents; if everything is fully disclosed, hackers might learn to avoid them. We must respect the opinions of all parties involved. Everything else should be transparent."

ChainCatcher news, according to official information, KiloEx announced on April 15 regarding the progress of the hacking incident that it has reported to the Hong Kong police and filed a case, and is cooperating with the Criminal Investigation and Cybersecurity departments for investigation. Some information related to the hackers has been obtained. Meanwhile, KiloEx has collaborated with the security company SlowMist to submit a detailed incident report, which will be publicly released when the time is right.The security vulnerability has been fixed, and there is currently no risk of position liquidation. All positions will be settled at the snapshot price before the incident. KiloEx is formulating a compensation plan and raising funds, and the Vault function will gradually resume after the plan is implemented, ensuring the safety of user funds.The hackers have not yet moved the stolen funds. KiloEx has repeatedly sent messages on-chain requesting the return of 90%, but has not received a response so far. The related addresses have been jointly blocked in coordination with multiple DeFi protocols and CEX.In response to rumors about internal involvement, KiloEx solemnly clarifies: the police and SlowMist have fully intervened in the investigation and obtained all internal data. If there are internal issues, the case will not be filed.

According to ChainCatcher news, the BNB Chain has announced 13 winning projects from the first quarter of the BNB AI Hackathon, including: DeFAI Operating System BINK AI, AI Autonomous Trading Platform Botzilla, AI Ecosystem Assistant Tutorial Agent, AI Trading Assistant Tokrio, NFT Platform Polycruz, On-chain AI Agency Protocol WORLD3 Protocol, Multi-Agent Platform Sentism AI, Web3 Gaming Platform iDos Games, AI Token Deployment Robot Boomie, AI Agency Marketplace VitaminAI, Decentralized Knowledge Center Stitch AI, Web3 Automation Ecosystem Tearline, AI Agency Commitment Framework Kudo.Winning projects can receive $50,000 in startup funding and MVB incubation support. As the hackathon activities continue until 2025, more winning projects will be announced and supported. BNB Chain encourages participants to submit their projects early.

ChainCatcher message, according to official news, the AI blockchain project DIN's official X account (@din_lol_) has been hacked.The information currently posted by the account is not from the official team, and users are advised not to click on any links or engage in related interactions. The DIN team stated that they are actively addressing the incident, and further announcements should be based on official channels.

ChainCatcher news, according to a report by the BBC, the X account of UK House of Commons leader Lucy Powell was hacked and used to promote a fraudulent "House of Commons" cryptocurrency. A series of now-deleted posts on Powell's X account described the "HCC" token as "a community-driven digital currency that brings the power of the people to the blockchain."The MP's office confirmed that her account was hacked on Tuesday morning and stated that "swift action has been taken to secure the account and remove misleading posts." Recently, several public figures with large followings, including BBC journalist Nick Robinson, have also experienced similar cyber hacking attacks.CoinShares senior researcher Luke Nolan stated that the hack of Powell's account is an example of "pump and dump," as the token only had 34 transactions, which may have generated about £225 in profit.

ChainCatcher message, ZKsync posted on platform X stating that, after investigation, the administrator accounts of three airdrop distribution contracts have been compromised. The attacker invoked the sweepUnclaimed() function, minting approximately 111 million unclaimed ZK tokens from the airdrop contract. This incident only involves the airdrop distribution contracts, and all mintable funds have been fully minted, making further exploitation through this method impossible.The ZKsync protocol, ZK token contracts, all three governance contracts, and all active token cap minters have not been affected by this incident and will not be affected. They are currently coordinating with exchanges to restore operations and recommend that the attacker return the funds to avoid legal consequences.

ChainCatcher message, ZKsync posted on platform X stating that, after investigation, the administrator accounts of three airdrop distribution contracts have been compromised. The attacker invoked the sweepUnclaimed() function to mint approximately 111 million unclaimed ZK tokens from the airdrop contract. This incident only involves the airdrop distribution contracts, and all mintable funds have been fully minted, making further exploitation through this method impossible.The ZKsync protocol, ZK token contract, all three governance contracts, and all active token cap minters have not been affected by this incident and will not be affected. They are currently coordinating with exchanges for recovery efforts and advise the attacker to return the funds to avoid legal liability.

ChainCatcher news, according to monitoring by Cyvers, the ZKsync hacker has transferred 1.7 million tokens across chains to ETH and deposited 10 ETH into a HitBTC address.

ChainCatcher message, KiloEx stated on social media that, with the assistance of law enforcement agencies, cybersecurity agencies, and several trading platforms and cross-chain bridge protocols, they have obtained key information regarding the hacking activities. They are currently monitoring the activities of certain addresses in real-time and are prepared to freeze the stolen funds at any time. To resolve this matter, the following proposal is made: return 90% of the stolen funds to the platform address, allowing the hacker to keep 10% as a white hat bounty, and a statement will be released on social media acknowledging the cooperation and that no further action will be taken.

ChainCatcher message shows that the on-chain contract platform KiloEx address has been hacked, resulting in a loss of approximately 7.4 million USD, involving assets from multiple chains such as BNB and Base.