August 21, 2025
11 11 11 AM
Latest Post
U.S. Justice Department Official Says Writing Code Without Bad Intent ‘Not a Crime’ State Street Expands Custody to Tokenized Debt on JPMorgan’s Blockchain Platform Victim Loses $91M in Bitcoin in Social Engineering Scam: ZachXBT Crypto Exchange Gemini Secures MiCA License in Malta, Expands European Footprint HBAR Rebounds as SWIFT Blockchain Trials Boost Bullish Outlook U.S. Banking Regulator OCC Lifts Enforcement Order From Anchorage Digital Fed’s Hammack Says ‘No’ to Rate Cut; Bitcoin Slips to Session Low Below $113K XRP Whipsaws on $2.84–$2.99 Range as Bulls Eye Breakout Above $3 Stablecoin Market Could Hit $1.2T by 2028, Maybe Affecting U.S. Government Debt Yields: Coinbase XLM Eyes Bullish Continuation After Rising From Support

CoinMarketCap Briefly Exploited With Wallet Phishing Pop-Up Message

Hackers exploited a vulnerability in CoinMarketCap’s front-end system, using a seemingly harmless doodle image to inject malicious code that triggered fake wallet verification pop-ups across the site.

The breach, confirmed by CoinMarketCap, used its backend API to deliver a manipulated JSON payload that embedded JavaScript into the homepage according to blockchain security firm Coinspect Security.

The script caused an unauthorized prompt instructing users to “Verify Wallet,” a phishing tactic aimed at tricking visitors into handing over access to their crypto holdings.

The blockchain security firm traced the attack to the platform’s rotating “doodles” feature, which allowed attackers to embed the malicious code without altering the site’s core infrastructure.

The pop-up was live for a short period before being removed by CoinMarketCap’s team.

“Upon discovery, we acted immediately to remove the problematic content,” CoinMarketCap said in a statement posted to social media. “Comprehensive measures have been implemented to isolate and mitigate the issue.”

CoinMarketCap has not disclosed how many users encountered the pop-up or whether any wallets were compromised.

This post was originally published on this site

Please enter Coingecko Free Api Key to get this plugin works