ChainCatcher message, recently attackers have exploited vulnerabilities in WordPress plugins to attack normal sites, injecting malicious js code into the sites, launching watering hole attacks that pop up malicious windows when users visit the site, tricking users into executing malicious code or signing Web3 wallets, thereby stealing users' assets.It is recommended that sites using WordPress plugins check for vulnerabilities, update plugins in a timely manner to avoid being attacked; users should carefully identify the downloaded programs and the content of Web3 signatures when visiting any site to avoid downloading malicious programs or authorizing malicious signatures that could lead to asset theft.

ChainCatcher news, Slow Mist released its weekly security report, revealing that the cryptocurrency sector lost over 90 million dollars last week. Among them, Prisma Finance suffered a loss of about 11.6 million dollars due to a hacking attack; Munchables lost approximately 62.8 million dollars due to internal manipulation; ZongZiFa lost about 229,000 dollars due to a flash loan attack; and the RWA infrastructure of the Curio ecosystem lost around 16 million dollars due to contract logic flaws.

ChainCatcher news, Slow Mist released its weekly security report, revealing that the cryptocurrency sector lost over 11.4 million dollars last week. Among them:The Super Sushi Samurai attack resulted in a loss of 4.6 million dollars;Dolomite suffered a loss of 1.8 million dollars due to an old contract vulnerability;AirDAO incurred a loss of 1.05 million dollars from a phishing attack;TICKER faced a loss of 900,000 dollars due to internal manipulation;ParaSwap lost 24,000 dollars due to a smart contract vulnerability;LayerSwap experienced a loss of 100,000 dollars due to DNS hijacking;The counterfeit Ansem phishing scheme caused a loss of 2.6 million dollars.

ChainCatcher news, according to SlowMist statistics, the Web3 ecosystem has lost approximately 24 million dollars due to security incidents in the past week, including Atlantis Loans, Ben Armstrong, TrustTheTrident, FPG, Sturdy, Pawnfi, Move VM, Hashflow, DEP/USDT and LEV/USDC, totaling 23,795,800 dollars. (Source link)

ChainCatcher news, according to SlowMist intelligence, one of the hacker addresses (0xf358..7036) has gained access to the private key permissions of ParaSwap Deployer and QANplatform Deployer. The hacker obtained approximately $1,000 from the ParaSwap Deployer address and conducted deposit and withdrawal tests at the QANplatform Deployer address.After analyzing 0xf358..7036, SlowMist MistTrack discovered that the hacker also stole funds from The SolaVerse Deployer and several other premium addresses. As of now, the hacker has received over $170,000 in funds, which have not been further transferred. The address traces include Uniswap V3, Curve, Trader Joe, PancakeSwap, OpenSea, and Matcha. SlowMist MistTrack will continue to monitor the hacker address and analyze related traces.