Crypto M - Crypto News
2.08K subscribers
15.9K photos
194 links
Your #1 destination for the latest and most unbiased market news on Bitcoin, Ethereum, NFT, Fintech, Web3, DeFi, and Blockchain.
Download Telegram
🚀 Moonwell Joins Circle Alliance Program

According to Odaily, Moonwell has announced its participation in the Circle Alliance Program via X. By leveraging features such as USDC Anywhere, Moonwell aims to facilitate seamless and secure transfers on major Ethereum networks.

#Moonwell #CircleAlliance #USDCAnywhere #Ethereum
🚀 Moonhacker Contract Suffers Flash Loan Attack, Incurring $320,000 Loss

According to Odaily, CertiK Alert has reported that the Moonhacker contract has been targeted in a flash loan attack, resulting in a loss of approximately $320,000. The vulnerability was identified in the Moonwell lending pool on the Optimism platform. The attacker exploited the contract by inputting the attack contract address as 'mToken,' thereby gaining unauthorized access to additional Moonhacker tokens and depleting them.

#Moonhacker #FlashLoanAttack #BlockchainSecurity #CryptoLoss #Optimism #Moonwell #CertiK #DeFi
🚀 Moonwell Lending Contract Faces Multiple Attacks, CertiK Reports

According to PANews, CertiK has reported that the Moonwell lending contract has been subjected to several attack transactions. The attackers exploited an incorrect oracle price for wrst, valued at approximately $5.8 million. By using a flash loan of just about 0.02 wrstETH and depositing it, they repeatedly borrowed over 20 wstETH, ultimately profiting 295 ETH, which is roughly equivalent to $1 million.

#Moonwell #LendingContract #CertiK #FlashLoan #OraclePrice #wstETH #wrstETH #CryptoAttack #DeFi #BlockchainSecurity #ETH
🚀 Security Concerns Rise Over Malicious Skills in OpenClaw Marketplace

On February 20, a security alert was issued by SlowMist founder Yu Xian regarding the discovery of 1,184 malicious skills in the OpenClaw's ClawHub marketplace. According to BlockBeats, these skills are capable of stealing SSH keys, encrypting wallets, accessing browser passwords, and opening reverse shells. A single attacker has uploaded 677 packages, with the top-ranked skill containing nine vulnerabilities and thousands of downloads.

Yu Xian cautioned users that text has evolved into commands, advising the use of AI tools within isolated environments due to potential risks associated with many OpenClaw skills. He emphasized that in Web3 security, contracts are only a part of the equation, and the root causes of incidents extend beyond contracts. Recently, Moonwell suffered a theft of $1.78 million, attributed to defective code from Co-Authored-By: Claude Opus 4.6.


#security #OpenClaw #ClawHub #maliciousskills #SSHkeys #walletencryption #browsersafety #reverseshells #Web3security #AItools #Moonwell #blockchainsecurity