ChainCatcher news, according to the SlowMist security team monitoring, an account suspected of masquerading as the official Coinbase address (0xcd53b841ffa2afba778d03ef928cfe864accca7b) is exhibiting risky behavior. This address sends false messages to users who withdraw large assets from Coinbase Prime, claiming that due to "operational errors during the transaction process," users are required to return the mistakenly transferred ETH funds, or else law enforcement will be contacted.The SlowMist team advises all users to remain vigilant when receiving similar messages and to carefully verify transfer information to avoid asset loss due to deception.

ChainCatcher news, PlayDapp officially stated on social media that it has directly contacted the hacker through on-chain messages and issued a bounty, demanding the hacker to immediately return all stolen assets. If this proposal is not accepted, PlayDapp will quickly cooperate with law enforcement agencies such as the FBI to pursue the hacker, while publicly announcing the bounty and seeking help from Web3 security providers.ChainCatcher previously reported that, according to Cyvers Alerts monitoring, the blockchain gaming platform PlayDapp was attacked by hackers today. The attacker's address was added as a minter, minting 200 million PLA tokens (worth 31 million USD). Currently, these PLA tokens have been distributed to various addresses, with 5.9 million USD worth of stolen PLA tokens transferred to the Gate platform.

ChainCatcher message, the blockchain explorer Etherscan announced an update to the on-chain message "Input Data Messages (IDM)" section, allowing users to read all on-chain messages on a single page.

ChainCatcher news, according to PeckShieldAlert data, the attacker of the DeFi protocol SafeMoon on the BNB Chain has expressed a willingness to communicate with the SafeMoon team and return the funds through on-chain messages.According to previous reports, SafeMoon was attacked 7 hours after the upgrade, resulting in a loss of $8.9 million. After the upgrade, SafeMoon introduced a vulnerability that allowed arbitrary token burning. The attacker first bought SafeMoon tokens, then inflated the price by burning SafeMoon tokens, and subsequently sold the tokens for profit. The attacker is identified as Mevbot, which had previously executed front-running attacks on other projects including PolarBearX, Nuwa, DBALL, and 520, and the address has records of interaction with CEX. (source link)

Chain Catcher news, cryptocurrency market maker Wintermute sent a message to the hacker via the Ethereum blockchain, stating that it hopes the hacker will accept the bounty terms. If the funds are returned before UST time September 22, 23:59 (Beijing time September 23, 7:59), this incident can still be considered a white hat event, and the hacker can receive a 10% bounty. Otherwise, Wintermute will contact the authorities through appropriate channels for further action.Earlier, Chain Catcher reported that Wintermute lost $160 million in a DeFi hack on September 20. (source link)