ChainCatcher news, Wemade's blockchain subsidiary Wemix Foundation has disclosed a loss of approximately 8.65 million WEMIX tokens (worth about 6.22 million USD) due to a hacker attack. Its CEO Kim Seok-hwan stated that the hacker is unlikely to be the North Korean organization Lazarus Group, but rather a professional who infiltrated the system by stealing the service monitoring authentication keys from the NFT platform Nile. It is reported that the hacker prepared for this attack for two months and then attempted 15 withdrawals through the creation of abnormal transactions, of which 13 were successful.Kim Seok-hwan also revealed plans to reopen all Wemix services on Friday and will upgrade security measures on the new blockchain infrastructure.

ChainCatcher news, the blockchain gaming platform WEMIX under the South Korean listed gaming company Wemade disclosed a hacking incident on March 4, stating: "On February 28, 2025, approximately 8,654,860 WEMIX tokens were anomalously extracted due to a malicious external attack on Play Bridge Vault." WEMIX stated that it has taken immediate action to prevent further damage and is cooperating with law enforcement to track down the attackers. On March 13, the WEMIX Foundation executed 20 million WEMIX tokens to mitigate market impact.In addition, according to a report by Yonhap News Agency today, the loss caused by the hacking incident on February 28 amounted to approximately 9 billion won (about 6.22 million USD). The WEMIX Foundation emphasized in response to external accusations of delayed announcements that it "never had any intention or attempt to conceal the hacking incident." A representative of the WEMIX Foundation stated, "After discovering the hacking incident on February 28, we immediately shut down the affected servers and began a detailed analysis. On the same day, we submitted a complaint against the unidentified attackers to the Cyber Investigation Division of the Seoul Police Agency, and the National Investigation Agency is currently investigating. Since the method of intrusion has not yet been determined, hastily releasing an announcement could expose us to further attack risks, which is why we did not issue an immediate announcement. As most of the stolen assets have already been sold off, the market impact has already occurred, and it is difficult to ensure there are no further risks. If we had announced immediately, it could have triggered market panic."

ChainCatcher news, according to BlockSec Phalcon monitoring, the Web3 launcher platform WebKeyDao has been hacked, resulting in a loss of approximately $73,000. The attacker exploited an unprotected function to purchase wkeyDao tokens at a low price and sold these tokens on a decentralized exchange for profit.Specifically, the attacker utilized the purchase function in the vulnerable contract to buy 230 wkeyDao tokens for 1,159 BUSD, and then sold these tokens on the decentralized exchange for 13,167 BUSD, achieving a profit of about 10 times.

ChainCatcher news, according to Decrypt, cybersecurity company Kaspersky has discovered that hackers are using copyright complaints to threaten YouTube content creators, forcing them to add the cryptocurrency mining Trojan SilentCryptoMiner in their video descriptions. This malware is based on XMRig and is used to mine cryptocurrencies such as Ethereum, Ethereum Classic, Monero, and Ravencoin, and it controls a botnet via the Bitcoin blockchain.The primary targets of the hackers are YouTubers who provide installation tutorials for the Windows Packet Divert driver. They first launch false copyright complaints against the videos, then contact the creators claiming to be the developers of the driver, demanding that they add malicious links. Currently, it is known that one YouTuber with 60,000 followers has fallen victim, leading to over 40,000 downloads of the infected files. Kaspersky estimates that at least 2,000 devices have been infected.Kaspersky security researcher Leonid Bezvershenko warned that hackers are exploiting the trust between YouTubers and their audiences, and such threats may spread to platforms like Telegram. He advises users not to trust tutorials that request disabling antivirus software and to verify the source before downloading any files to prevent infection by cryptocurrency mining Trojans.

ChainCatcher message, Safe states that the Safe{Wallet} team has been working with Mandiant over the past few days to conduct a comprehensive forensic investigation and security audit regarding the Bybit hacking incident. Safe emphasizes that its team is committed to transparency. Mandiant's preliminary report results will be published next week.

ChainCatcher message, Mask Network founder posted on X, "Thank you very much for your attention, and I ask everyone to remain rational. Please do not speculate on the situation. Offline is one possibility, and I hope it is not anyone I know. I have already involved professionals.The stolen funds are my personal assets and have no relation to the company, fund, or associated investment projects. Please do not worry about any business concerns.The reason why humans are different from beasts is very rare; the common people abandon it, while the gentlemen uphold it. When heaven is about to confer a great responsibility on a person, it will first temper their mind and spirit, labor their muscles and bones, starve their body, and expose them to poverty, thereby making them endure hardship and increase their capabilities."

ChainCatcher news, according to lmk.fun (formerly Scopescan) monitoring, the hacker who infiltrated Mask Network founder Suji Yan's wallet has transferred the stolen assets to 7 wallet addresses and exchanged them for a total of 1690.17 ETH.

ChainCatcher news, Mask Network founder Suji Yan posted, "Today is my 29th birthday, just passed 6 hours ago. About 3 hours ago, a public wallet I carried on my phone was hacked, and over 4 million dollars worth of assets were stolen. All the stolen transactions seem to have been done manually and lasted for over 11 minutes.So, either my private key was leaked on my birthday, and the hacker transferred the funds manually, or it was an offline attack. I was having a private gathering with a group of friends, and my phone was set aside; I left it for a few minutes when I occasionally went to the bathroom. I trust my friends, but this is a nightmare for anyone.I have contacted SlowMist and Zachxbt for assistance in the investigation and am cooperating with relevant agencies and law enforcement. I will not disclose more information until the results from these experts are available.I hope that if this was an offline attack, you will face me directly. Cryptocurrency is not a dark forest, and I will not let it become that."

ChainCatcher message, Slow Mist posted on platform X, announcing the hacker addresses of the 7 Mask Network founders whose funds were stolen:0x7e8da2dc33416e5f73008366cd5027f22be17df70xce98ad7553c73578633a286f476c641179c5695d0xb6a5426b885172fb73d3c8fcf9612610612df7070xe457171b295e3ec597ddb234a46215e6006636e70x15eb933b90f13fdfa0f46a7ae52fe8cf4307fa430x180fe23ff9c57031e305ecffaadff4a5ac3d92190xaa937733edecda7924849c284b76912489e1f693

ChainCatcher message, Cyvers Alerts posted on platform X indicating that suspicious transactions related to the founder of the decentralized social protocol Mask Network, Suji Yan, have been detected. A suspicious address received nearly 4 million dollars in digital assets, including: 113 ETH, 923 WETH, 301 ezETH, 156 weETH, 90 pufET, 8400 MASK, 50000 USDT, and 15 swETH.It is reported that the stolen assets were immediately exchanged for ETH and distributed across six different addresses.

ChainCatcher message, Bybit co-founder and CEO Ben Zhou released a hacker forensics report provided by Sygnia and Verichains on the X platform, which disclosed that malicious code was deployed at 15:29:25 UTC on February 19, specifically targeting Bybit's Ethereum multi-signature cold wallet.

ChainCatcher news, the Web3 asset data platform RootData published a tweet analyzing 17 major cryptocurrency hacking incidents (with stolen amounts exceeding 100 million USD) that occurred over the past few years (since the second half of 2021) and their impact on BTC price trends.Data shows that while BTC often experiences a drop on the day of the hacking incident, the price changes within 7 days and 1 month after the hacking indicate that the long-term impact of these hacks is limited. This suggests that while they may shake market confidence in the short term, BTC prices typically recover quickly.

ChainCatcher news, Slow Mist founder Yu Xian posted on social media that the theft of 12,000 ETH last year was carried out by the Eastern European hacker group Inferno Drainer, not North Korean hackers. The money laundering methods have some overlap with North Korean hackers, making it very difficult to recover the funds.

ChainCatcher message, stablecoin digital bank Infini founder Christian posted on social media, "I know hackers may be monitoring my tweets, so this is my sincere message: I have tried to show that there are still good and responsible people in this industry. I deeply regret my mistakes and will strive to do the right thing for my users.I hope there is a way to recover what we have lost, and I am willing to offer 20% of the stolen amount as a bounty, and I promise that if the funds are returned, I will not take legal action. Regardless, I will continue to love and support this industry."

ChainCatcher message, Binance founder Zhao Changpeng posted on X that he has updated a security advisory article from 5 years ago, reducing its content from 5,500 words to 4,300 words. He recommends users read it to avoid potential hacking attacks and included a relevant link.

ChainCatcher news, Infini founder Christian posted a response regarding the platform's approximately $49.5 million hacking incident. The team is currently sorting out and tracking the specific situation. The user withdrawal function is operating normally, and in the worst-case scenario, full compensation will be provided, so users can rest assured.

ChainCatcher news, according to monitoring by Lookonchain, Bybit is suspected to have repurchased a total of 266,694 ETH (approximately $742 million) after experiencing a hacker attack.Among them, a suspected Bybit associated address 0x2E45...1b77 purchased 157,660 ETH (approximately $438 million) through over-the-counter transactions from Galaxy Digital, FalconX, and Wintermute;Another suspected associated address 0xd7CF...A995 purchased 109,033 ETH (approximately $304 million) from decentralized and centralized exchanges.