
Crypto Security Report: May 2024
Featuring Smart Transactions, Pink Drainer's shutdown after $85M in thefts, Lazarus's Contagious Interview job scams, and a $68M address poisoning loss.

Featuring Smart Transactions, Pink Drainer's shutdown after $85M in thefts, Lazarus's Contagious Interview job scams, and a $68M address poisoning loss.

Featuring an investigation of $200 million laundered by Lazarus Group, CryptoChameleon phishing targeting LastPass users, SEAL's new crypto-native ISAC, a Privnote phishing network, and Google's suit over 87 fraudulent crypto apps.

Featuring MetaMask's ETHDenver security events, new DeFi Armor and Harpie Snaps, the $2.5 million Inferno Drainer compromise, a $7 million phishing campaign targeting FTX and BlockFi users, and the $16 million exploit of Curio's MakerDAO-based contracts.

Featuring Blockaid security alerts now on by default, Account Management Snaps and the Keyring API, the new LavaDome tool, the Security Alliance (SEAL) reveal, a $440,000 MicroStrategy X account hack, and $6.2 million in continued LastPass thefts.

Featuring Taylor Monahan on the early-2024 attacks on Orbit, Radiant, and Gamma, a MailerLite compromise behind over $580,000 in phishing, an NFT airdrop scam that spoofs Etherscan logs, and cracked macOS software hiding crypto-stealing backdoors.

Featuring the $46 million KyberSwap exploiter's demand for control of the protocol, the $87 million HECO bridge hack on HTX, the Ledger Connect Kit supply chain attack, and 12 new security Snaps in the MetaMask Snaps Directory.

Learn how LavaMoat offers triple-point protection in the software development cycle and how you can defend your app from an attack today.

Featuring Tether's freeze of 225 million USDT tied to a pig butchering syndicate, the $130 million Poloniex hack and its $10 million bounty, a $12.5 million crypto abduction in Montenegro, and Taylor Monahan and ZachXBT's LastPass breach investigation.

Featuring MetaMask and Blockaid's security alerts, the $7 million Fantom Foundation hack, EtherHiding malware stored on BNB Chain, Galxe's 110% compensation after a DNS hijacking attack, and the LavaMoat webpack plugin open beta.

Featuring the MetaMask Snaps open beta, roughly $35 million in thefts possibly linked to Secret Recovery Phrases stored in LastPass, the Pink Drainer SIM-swap attack on Vitalik Buterin, and a calldata allowlist to curb DNS hijacking losses.