Rogue iPhone app escapes iOS sandbox to hijack $580,000 in USDT

Binance, OKX and other crypto platforms are warning users to replace exposed wallet credentials and move funds to clean devices.

• A malicious iPhone app called Fomopeek, distributed via the App Store, has been linked to the theft of nearly $580,000 in USDT by exploiting iOS sandbox vulnerabilities to steal private keys and other sensitive data.
• The exploit allowed the app to access private keys, seed phrases, and Keychain data from other applications on the device, prompting warnings from major crypto exchanges like Binance and OKX.
• The incident highlights the risks associated with mobile-based crypto security and has led to recommendations for users to move funds to new wallets on clean devices and update their operating systems.

Topics: Asset types, Legal regulatory, Risk default, Stablecoins digital cash, Enforcement actions litigation, Smart contract vulnerabilities

Tags: #fomopeek #iossandbox #usdt #stolenfunds #privatekeys #malware #cybersecurity #cryptosecurity #binance #okx

Read more

$47M Still Missing After Liquid Hack as Blockstream Bargains With 'White Hats'

The hackers have returned 3,400 of the roughly 4,000 BTC drained from the sidechain, but about 600 BTC remains outstanding—and some doubt the actors' "white hat" claims.

• The Liquid Network experienced a hack resulting in the loss of approximately $320 million worth of Bitcoin, with $47 million still missing.
• Blockstream, the company behind Liquid, is negotiating with the hackers, who claim to be 'white hats', for the return of the remaining funds.
• Skepticism remains regarding the hackers' true intentions, with some suggesting the situation resembles extortion rather than genuine white-hat activity.

Topics: Blockchain usage, Risk default, Legal regulatory, Private enterprise ledgers, Smart contract vulnerabilities, Enforcement actions litigation

Tags: #liquidnetwork #blockstream #bitcoin #hack #whitehat #lbtc #elementssoftware #stolenfunds #negotiation #extortion

Read more

Coinsbuy Announces $100K Reward After Sunday Security Breach

Crypto payments platform Coinsbuy says it has covered all client losses after wallets tied to the service were allegedly drained on Sunday. Blockchain investigator SpecterAnalyst reported that more than $7.9 million was moved out across Ethereum and TRON, with parts of the procee...

• Crypto payments platform Coinsbuy experienced a security breach resulting in over $7.9 million allegedly being drained from client wallets across Ethereum and TRON.
• Coinsbuy has stated that all client losses have been covered from its own reserves and services have been restored, while offering a $100,000 reward for information leading to the identification and recovery of the stolen funds.
• The incident highlights the risks associated with crypto payment infrastructure and the ongoing challenges in tracing and recovering illicitly transferred digital assets, with technical details of the breach yet to be fully disclosed.

Topics: Infrastructure providers, Legal regulatory, Risk default, Tokenization platforms, Enforcement actions litigation, Smart contract vulnerabilities

Tags: #coinsbuy #securitybreach #cryptopayments #stolenfunds #blockchaininvestigator #specteranalyst #ethereum #tron #monero #reward

Read more