Crypto Hackers Strike Again: Lottie Player Compromised, Users Lose 10 BTC!

Share This Post

Radiant Capital Hack How a Multisig Flaw Led to a $50M Loss

The post Crypto Hackers Strike Again: Lottie Player Compromised, Users Lose 10 BTC! appeared first on Coinpedia Fintech News

In a major coordinated attack on the web3 space, on-chain sleuths discovered a massive supply chain attack on Lottie Player earlier today. According to the LottieFiles team, the attackers managed to plug in bugs into several Lottie Player versions – including 2.05, 2.06, and 2.0.7. Notably, the said versions were uploaded and published on GitHub’s npm platform.

“The unauthorized versions contained code that prompted for connecting to user’s crypto wallets. A large number of users using the library via third-party CDNs without a pinned version were automatically served the compromised version as the latest release,” the LottieFiles team noted

Immediate Mitigating Action

The LottieFiles team is currently investigating the incident as it is believed that a developer with the required privileges facilitated the attack. The LottieFiles team noted that it has published a new safe version dubbed 2.0.8, which is a copy of the original Lottie Player version 2.0.4.

Most importantly, the LottieFiles team has unpublished the compromised package versions from the npm platform to mitigate further damage.

Additionally, the LottieFiles team removed all access and associated service accounts of the impacted developer.

Impact of the Lottie Player Supply Chain Attack

According to the on-chain analysis platform Scam Sniffer, the Lottier Player supply chain attack compromised major decentralized applications (Dapps) led by 1inch (1INCH), and Movement network. With the attacker having the motive of draining users’ funds, the 1inch protocol has pledged to refund all the affected users through its network. 

Meanwhile, the 1-inch team has advised all affected users to revoke the ERC20 smart contract approvals from malicious addresses using revoke.cash to prevent further harm. According to on-chain data analysis, a web3 user lost 10 Bitcoins, worth over 720k, earlier today due to the Lottie Player supply chain attack.

Read Entire Article
spot_img
- Advertisement -spot_img

Related Posts

BRICS Braces for Trump’s Return, Unyielding Against US Influence

As BRICS expands its influence, Trump’s 2025 return to the White House is unlikely to disrupt the bloc’s economic momentum, with leaders focused on deepening global partnerships BRICS Powers

Bitcoin Price Enters ‘Second Breakout Of The Cycle,’ Analyst Puts Peak Above $150,000

The Bitcoin price could see its second massive breakout in this current market cycle, as a crypto analyst has predicted a peak above $150,000 for the pioneer cryptocurrency This bullish forecast

Crypto For Secrets: Chinese Man Sentenced To Life For Selling State Info

State authorities in China are now patching loopholes in the national confidentiality regulations after they discovered that one of their colleagues assigned in a confidential unit sold state secrets

What to Expect for Crypto Under Trump’s New Administration

A Moody’s digital assets expert outlines how a Trump administration and pro-crypto Congress could reshape US crypto regulation, hinting at major industry impacts Expert Analysis: How Trump’s

What’s Next for XRP? Ripple CEO Discusses Crypto Landscape Shift

Ripple and XRP could face a turning point as new pro-crypto regulatory shifts promise renewed hope and potential resolution to years-long legal battles XRP’s Future: Ripple CEO Hints at a New

Bitcoin Analyst Sets $88,800 Target As BTC Breaks ATH 3 Days In A Row – Details

Bitcoin is on a record-breaking run, reaching new all-time highs for three consecutive days following Donald Trump’s victory in the US election and a recent 25 basis point rate cut by the Federal