Related Threat Clusters
-
North Korean Hackers Utilize EtherHiding for Cryptocurrency Theft
The Google Threat Intelligence Group (GTIG) reports that North Korean threat actor UNC5342 has adopted a new technique called EtherHiding to deliver malware and facilitate cryptocurrency theft. This method embeds…
3 articles · Updated May 26, 2026 -
Cybercriminals Exploit BNB Chain for Malware via Fake CAPTCHAs
Microsoft Threat Intelligence has reported a new malware campaign utilizing the BNB Smart Chain, employing a technique called EtherHiding. This method allows hackers to store malicious code within blockchain smart…
12 articles · Updated August 7, 2026 -
ClearFake Campaign Uses Smart Contracts for C&C on BSC Testnet
In May 2026, TrendAI™ Research reported on a cyber intrusion involving the ClearFake campaign, where threat actors utilized the EtherHiding technique to deliver payloads via smart contracts on the BNB Smart Chain…
2 articles · Updated May 26, 2026 -
Malicious Joyfill npm Packages Distribute DEV#POPPER RAT and Credential Stealer
On July 28, 2026, two beta releases of Joyfill npm packages, @joyfill/layouts and @joyfill/components, were found to deliver the DEV#POPPER remote access trojan (RAT) and a credential stealer. The malware executes upon…
5 articles · Updated July 29, 2026 -
Cosmos EVM Module Security Incident Halts Multiple Chains
On August 24, 2026, Cosmos Labs confirmed a security incident affecting its EVM module, prompting affected chains, including KiiChain, TAC, and MANTRA, to halt operations. KiiChain reported a significant loss of…
24 articles · Updated August 25, 2026 -
The Sandbox Exploit: 14.9B Unbacked SAND Tokens Minted on Base and BNB Chain
On August 22, 2026, The Sandbox reported a security breach that allowed an attacker to mint 14.9 billion unbacked SAND tokens on the Base and BNB Smart Chain networks. The exploit involved hijacking LayerZero delegate…
24 articles · Updated August 22, 2026 -
ClearFake Malware Campaign Exploits BSC Testnet for C2 Operations
The ClearFake campaign has emerged as a significant cybersecurity threat by using BNB Smart Chain (BSC) testnet smart contracts to establish a resilient command-and-control (C2) infrastructure. This innovative approach…
2 articles · Updated May 28, 2026 -
THORChain Suffers $10.7M Exploit, Trading Halted Amid Security Concerns
On May 15, 2026, THORChain paused trading operations after a security breach was detected, resulting in an estimated loss of approximately $10.7 million. The exploit, traced by blockchain researchers ZachXBT and…
20 articles · Updated May 15, 2026 -
Over 5,400 Websites Compromised to Deliver ClickFix Payloads via Blockchain
A cybercriminal operation has compromised over 5,400 small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC). Most affected sites are built on WordPress and…
2 articles · Updated September 5, 2026 -
Humanity Protocol Loses $32M in Major Security Breach; Token Value Plummets
On June 9, 2026, Humanity Protocol suffered a significant security breach, losing over $32 million due to compromised private keys linked to an employee's device. The attacker drained funds from at least 17 wallets,…
33 articles · Updated June 9, 2026
Recent Intelligence Reports
- Netskope explains — www.netskope.com · September 5, 2026
- Cosmos EVM Security Incident Forces Chains To Halt Validators — Coingabbar · August 25, 2026
- Sandbox Bridge Hack Mints 14.9B SAND While Coinbase Delists Futures — News.Bitcoin · August 23, 2026
- Hackers minted 14.9B fake SAND tokens on The Sa... — Pluang · August 23, 2026
- Sandbox Contains Exploit After Attacker Mints 14.9B SAND Tokens — Yellow · August 23, 2026
- Read the article at Coinpaper — coinpaper.com · August 23, 2026
- SAND Bridge Exploit: The Sandbox Isolates Base and BNB Chain After Unbacked Token Mint — Cryptorank · August 22, 2026
- The Sandbox hacked for $718M via cross — Pluang · August 22, 2026