ChainCatcher news, the Iranian cryptocurrency trading platform Nobitex has released its fourth announcement regarding the theft incident: "In the ongoing response to the recent security incident at Nobitex, the situation is now under control, and all external access to our servers has been completely severed. Users may notice a significant decrease in their wallet balances on various blockchain networks at Nobitex. This is due to our technical team proactively emptying the hot wallet funds to protect user assets. Therefore, users need not worry about the changes in these wallet balances.The stolen assets have been transferred to a wallet using a non-standard address, composed of random characters, which is distinctly different from the patterns of attacks on traditional cryptocurrency trading platforms. These wallets were subsequently used to destroy and burn user assets. Clearly, the purpose of this attack is not economic gain, but rather an attempt to harm the security and psychological safety of users' assets through deceptive means.The stolen funds can still be publicly tracked on the blockchain network, with the estimated total amount of stolen assets currently around 100 million USD. Furthermore, due to network restrictions and blocked access to external servers, the platform's recovery may take longer than usual. However, Nobitex is making every effort to expedite the repair process. All user assets are fully secured by Nobitex's reserve fund, and users will not incur any financial losses. Further updates will be provided through subsequent announcements."

ChainCatcher news, according to Beincrypto, the blockchain security platform Scam Sniffer has disclosed that the notorious phishing organization Inferno Drainer has recently launched a new type of attack utilizing the upcoming EIP-7702 feature in Ethereum, resulting in individual user losses of up to $150,000.EIP-7702 is a proposal in the Ethereum Pectra upgrade that allows external accounts (EOA) to temporarily act as smart contract wallets during transactions. Attackers exploit this by using authorized MetaMask wallets to batch transfer user assets, rather than directly controlling wallet permissions.Yuxian, the founder of Slow Mist Technology, stated that such attacks have evolved from traditional private key theft to utilizing the "execute" command to perform malicious authorizations in the background. Security experts recommend that users regularly check their token authorization status and use tools like Etherscan to identify abnormal delegation behaviors to mitigate potential risks.

ChainCatcher news, according to the official blog, Binance announced that from January to July 2024, it successfully prevented losses of over $2.4 billion from potential scams and fraudulent activities that could have affected more than 1.2 million users.Binance has adopted an advanced internal risk engine that utilizes a hybrid approach of artificial intelligence (AI) and manual review for real-time monitoring around the clock. Of the $2.4 billion in prevented losses recorded so far this year, over $1.1 billion is related to suspected cryptocurrency scams, accounting for approximately 45% of the total amount.Binance's Chief Technology Officer Rohit Wad stated, "User-centricity has always been Binance's top priority, which reflects our commitment to building and maintaining industry-leading technological tools and security processes that enable us to protect users and their assets around the clock."He also added, "We want users to remain vigilant and take responsibility for their own security. While our team has implemented extensive measures to protect your funds, users themselves always play the biggest role in safeguarding their assets. Stay informed, use strong security measures, and be alert to potential scams."

ChainCatcher news, DEX dYdX announced that the domain registrar for dydx.exchange (previously Squarespace) confirmed that on July 23, the Squarespace account of dYdX Trading was accessed by unauthorized individuals, as these individuals successfully conducted a social engineering attack on Squarespace customer support.During the approximately 2 hours that the dydx.exchange domain was hijacked, 2 users lost a total of approximately $31,000.dYdX Trading has contacted these users and will ensure they are fully compensated. After re-securing the domain, dYdX has added additional controls to prevent such incidents from happening again, including migrating the domain to Cloudflare.

ChainCatcher message, Binance responded to Twitter user @CryptoNakamao regarding the hijacking of web cookies due to malicious plugins, resulting in a loss of up to $1 million. They expressed regret over the incident. After analysis by customer service, security, and risk control colleagues, and in the spirit of "openness and transparency," the following scenario is reconstructed:The cause of the incident was that the user's computer was compromised by hackers;Binance's security customer service took 1 minute and 19 seconds to process the user's freezing request;The platform investigated wash trading and confirmed the suspect's account, and it takes time to submit a freezing request across platforms;As of the current investigation results, Binance had not noticed any information related to the AGGR plugin prior to this incident.Unfortunately, Binance is unable to provide compensation for cases unrelated to them. The platform is very grateful to the user for providing direction for future optimizations, and Binance will look into how to offer assistance from the platform's perspective.

ChainCatcher news, May 17 - Dolce & Gabbana USA Inc., the American company of the Italian luxury brand Dolce & Gabbana, has been sued by a customer who claims that the NFT he purchased for $6,000 has lost 97% of its value due to the company's delivery errors. The complaint states that the delivery of the digital clothing was 20 days late and "could only be used on a metaverse platform with almost no users." Even after the digital clothing was released, token holders were unable to use them for the next 11 days because Dolce & Gabbana had not obtained prior approval from the metaverse platform. The plaintiff, Luke Brown, stated that the NFT he purchased lost $5,800. Brown filed the lawsuit on behalf of a group of individuals who purchased digital assets from the NFT project. The case also lists the NFT marketplace UNXD as a defendant.

ChainCatcher news, ZachXBT posted a community risk alert on Telegram, pointing out that the Across Protocol documentation link leads to a fake Discord server, which is suspected to have caused users to lose approximately $880,000 in aEthWBTC. Currently, the Across team has responded that they have removed the fake link.

ChainCatcher news, according to The Block, the user losses in the Azuki "official Twitter account was hacked" incident amount to approximately $780,000.Additionally, data provided by Web3 security researcher Fantasy shows that the number of affected addresses in this incident is relatively small. A user address starting with 0x3ec had 751,000 USDC stolen, while other users lost small amounts of ETH, NFTs, and other project tokens. Currently, the hacker has converted all the USDC into ETH. (source link)