Ethereum Virtual Machine — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
9
occurrences
First Seen
December 3, 2025
Last Seen
May 31, 2026

Ethereum Virtual Machine is a technology platform tracked across 8 threat clusters and 9 intelligence report mentions on ThreatCluster. First observed December 3, 2025; most recent activity May 31, 2026.

Overview

Ethereum Virtual Machine (EVM) is the runtime environment for Ethereum smart contracts and decentralized applications, enabling deterministic execution of code across the network. It is central to Ethereum’s programmability and is a common target for tooling-related threats. The article notes a malicious Rust-based entity, described as an "evm-units" impersonator, that masquerades as EVM-related tooling to deploy an operating system on targets, illustrating how attackers leverage Ethereum branding to facilitate intrusion.

Related Threat Clusters

Recent Intelligence Reports

  • Understanding the XRP Ledger's Stand Against Flash Loans in DeFi — Valuethemarkets · May 31, 2026
  • XRP Ledger proposal blocks flash loan attacks, enhancing DeFi security — Cryptobriefing · May 31, 2026
  • Annualized loss rate merely 0.03%: A data — Techflowpost · May 18, 2026
  • Can AI Agents Boost Ethereum Security? OpenAI and Paradigm Created a Testing Ground — Decrypt.Co · February 18, 2026
  • Figure Technology Confirms Data Breach via Social Engineering Attack — Kucoin · February 14, 2026
  • ZachXBT Warns of Active Exploit Draining Crypto Wallets — Beincrypto · January 2, 2026
  • Flow Reverses Rollback Plan After Developer Backlash Over $3.9M Exploit Response — Yellow · December 30, 2025
  • Trust Wallet's Breach: Lessons in Crypto Security and User Trust — Onesafe · December 26, 2025

CVSS v3.1 Breakdown