ChainCatcher news, according to Cyvers Alerts monitoring, the lending protocol zkLend suffered a vulnerability attack on the Starknet network, resulting in a loss of $4.9 million. The attacker attempted to transfer the stolen funds across chains to Ethereum and launder them through the privacy protocol Railgun, but due to Railgun's policy restrictions, the funds were forcibly returned to the original address.In previous news, zkLend has offered a 10% white hat hacker bounty to the attacker through on-chain messages, and the related transaction has been confirmed on the Ethereum blockchain.

ChainCatcher news, Cyvers Alerts posted on platform X that the system detected multiple suspicious transactions involving hot wallets across several chains. Currently, digital assets worth over $29 million have been transferred to suspicious addresses on chains such as BNB, ETH, OP, POL, BASE, and ARB, and these addresses have begun exchanging assets for ETH.ChainCatcher previously reported that according to monitoring by Shield, the hot wallet of the cryptocurrency derivatives trading platform Phemex has seen large amounts of suspicious outflows.

ChainCatcher news reports that, according to a report released on Monday, President-elect Trump's second inauguration may become the most militarized in U.S. history. U.S. national security agencies have warned that, although there are currently no specific credible threats, Trump's inauguration will be a "potential target for violent extremists." Potential criminals, particularly those "disgruntled with the election," may view the president-elect's swearing-in as "the last opportunity to influence the election results through violence," a group of intelligence and law enforcement agencies wrote in an undisclosed threat assessment.According to a report by The Daily Telegraph citing U.S. officials, nearly 7,800 soldiers will patrol Washington, D.C., alongside approximately the same number of police officers to ensure a "peaceful transfer of power." The report also revealed that two FBI field offices, a large number of drones, and at least 30 miles of fencing will be deployed to protect Trump and guests attending the inauguration from a range of potential violent threats, including leaders from around the globe and senior lawmakers from across the United States. (Jinshi)

ChainCatcher message, AabyssTeam founder issued a security warning on X, stating that Cyberhaven security company was attacked by phishing emails, resulting in the browser plugin they released being implanted with malicious code, attempting to read the uploaded users' browser cookies and passwords. Subsequent code analysis revealed that multiple browser plugins were attacked, including Proxy SwitchyOmega (V3), affecting five hundred thousand users in the Google Store, which is currently under scrutiny.The founder of Slow Mist, Yu Xian, forwarded the warning and stated that this type of attack uses an OAuth2 attack chain. After obtaining the "extension publishing rights" of the developer of the "target browser extension," they publish an updated plugin extension with a backdoor. Each time the browser is launched or the extension is reopened, it may automatically trigger the update, making the backdoor implantation difficult to detect. He reminds wallet extension developers not to be careless.

ChainCatcher message, CertiK Alert posted that the Hologram team has confirmed that the Holoworld AI X account has been compromised. Users are advised to be cautious about security and not to interact with this account.

ChainCatcher message, according to CertiK Alert on social media: "We discovered a vulnerability in the IPC token deployed 7 days ago. The attacker bypassed the flash loan protection mechanism and exploited the deflationary mechanism of burning tokens in the token pair, stealing approximately $590,000 in funds from the victim's token pair."

ChainCatcher message, GMGN.Ai has issued a security alert on social media platforms stating: "The official GMGN iOS App is currently under review by the App Store. The iOS version of the app available in the App Store is a counterfeit and poses significant security risks. Please do not download or install it. All updates and app downloads should be based on official channel information."Additionally, the development account review for the GMGN APP iOS version has been approved, and a Testflight version is expected to be launched within a week. The App Store version will continue to await approval for listing.It is reported that GMGN.AI is a tool focused on the rapid discovery and trading of MEME tokens, aimed at helping users improve trading efficiency by following smart money.

ChainCatcher news, according to Cyvers Alerts monitoring, the USDC lending contract of Moonwell on the Optimism network has suffered a flash loan attack. The attacker used a malicious contract address as mToken to obtain unauthorized token approvals from Moonhackers, thereby stealing funds. The attacker received funding support through Tornado Cash on the Ethereum network, and the stolen USDC has been exchanged for DAI, which is currently stored in the attacker's wallet.

ChainCatcher news, according to The Block, Uniswap Labs has partnered with web3 security company Blockaid to develop a new on-chain detection and response system to protect DEX users from malicious token attacks. If users interact with tokens flagged as potentially malicious, Blockaid's tool will alert them.The tool will be launched on Uniswap's web version, mobile version, and self-custody crypto wallet extension. It combines static (comparing contract source code with known viruses) and dynamic (using virtual environments to trigger contracts) verification heuristic methods, along with various machine learning capabilities, to help prove the legitimacy of tokens.

According to ChainCatcher news and the official blog, Binance released its 2024 anti-fraud refund program year-end report, stating that a total of $9.1 million has been recovered. There were 30,000 proactive calls made to potential victims, preventing total losses exceeding $129 million. A total of 47,000 malicious addresses have been blacklisted, and more than 15,000 alerts are sent to users daily.

ChainCatcher news, blockchain security monitoring company Cyvers Alerts posted on the X platform that the total losses from hacking and fraud in the crypto space have exceeded $6 billion. Compared to last year, overall exploitations have increased by 40%, with access control vulnerabilities being predominant, causing 81% of the losses.

ChainCatcher news, according to the official announcement, Upbit has listed DAD and BTG as trading warning projects, and the deposit service will be suspended accordingly.

ChainCatcher message, Cyvers Alerts disclosed multiple suspicious transactions involving TapiocaDAO on platform X.It is reported that the owner of the belonging contract has changed, and the suspicious address has exchanged TAP tokens for 591 ETH, causing the token price to drop by 93%. The suspicious address then used Stargate to bridge the funds to BNB Chain, where the address holds approximately $4.7 million in BSC-USD and USDC.

ChainCatcher message, according to Cyvers Alerts monitoring, the hacking money laundering strategy of the cryptocurrency exchange BingX has changed. Previously, attackers used eXch for laundering, and recently, attackers have cross-chained the stolen assets from the OP chain to the ETH chain and deposited them into Tornado Cash.

ChainCatcher message, Cyvers Alerts stated that suspicious transactions involving Onyx have been detected on the Ethereum blockchain, with current losses potentially reaching 3.2 million USD, primarily in VUSD. The attacker currently holds 521 ETH, worth approximately 1.36 million USD.

ChainCatcher news, according to Cyvers Alerts monitoring, as of today 13:44, the estimated loss from the hacking incident at the cryptocurrency exchange BingX has exceeded 52 million dollars.BingX Chief Product Officer Vesper Lin stated, "All user losses caused by this hacking incident will be fully covered by BingX's own funds." Reports indicate that security companies have assisted in freezing approximately 1 million dollars of the stolen funds. BingX is still calculating its total losses.

ChainCatcher message, according to Cyvers Alerts monitoring, the DeltaPrime hacker transferred 1200 ETH (approximately 2.8 million USD) to a new address.

ChainCatcher news, according to Cyvers Alerts monitoring, the wallet of the Indonesian crypto trading platform indodax has conducted over 150 suspicious transactions across different networks, with a total loss of approximately 18.2 million USD. Suspicious addresses are exchanging various tokens for Ethereum.

ChainCatcher message, QCP Capital stated that the Volatility Momentum Indicator (VMI) for Bitcoin and Ethereum triggered an alert this morning, indicating that the market is entering a period of increased volatility. The directionality of this signal is unknown, meaning it does not indicate the direction of price points but suggests that significant price fluctuations may occur in the short term (the chart below shows the implied volatility of BTC at historical VML signals). Historically, shifting from profit-generating strategies to long convexity (buying options) strategies at this time has helped optimize portfolio returns.