when

Disney

<p>A silent threat is lurking. On October 30, several major crypto platforms reported a surge of suspicious popups prompting users to link their wallets. This security breach was traced to a supply chain attack involving the popular Lottie Player animations library, used by well-known websites like Apple, Spotify, and Disney.</p>   
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
   https://twitter.com/blockaid_/status/1851729469142372711 
 </div>
</figure>   
<p>The question arises: How did such a widespread attack go unnoticed?</p>   
<h2 class="wp-block-heading" id="h-details-of-the-supply-chain-breach"><strong>Details of the Supply Chain Breach</strong></h2>   
<p>Hackers specifically targeted <a href="https://coinpedia.org/beginners-guide/what-is-defi/" target="_blank" rel="noreferrer noopener">decentralized finance</a> (DeFi) platforms, including 1inch and TEN Finance, by tampering with the Lottie Player JavaScript library. They accessed LottieFiles' GitHub account after stealing authentication data from a senior software engineer.</p>   
<p>The attackers then released three updates containing malware, which embedded popups into the library that urged users to connect their crypto wallets.</p>   
<p>The hacked version of Lottie Player caused sites and apps to display popups that redirected users to the Ace Drainer crypto-draining tool. Unlike past attacks that relied on separate phishing links, this tactic delivered harmful ads directly through popular and trusted crypto applications, capitalizing on users’ trust.</p>   
<h2 class="wp-block-heading" id="h-lottiefiles-response"><strong>LottieFiles' Response</strong></h2>   
<p>After identifying the breach, <a href="https://github.com/LottieFiles/lottie-player/issues/254#issuecomment-2448685876" target="_blank" rel="noreferrer noopener nofollow">LottieFiles promptly</a> removed the malicious updates and advised developers to upgrade to secure versions—either 2.0.4 or the latest 2.0.8. Jawish Hameed, VP of Engineering at LottieFiles, confirmed that the infected versions had been removed from GitHub repositories.</p>   [post_titles_links postid="373635"]   
<h2 class="wp-block-heading" id="h-everyone-stay-alert">Everyone, Stay Alert! </h2>   
<p>Despite LottieFiles' response, cybersecurity firms like Wiz and Blockaid caution that users should remain vigilant, as some platforms may still show the malicious popups if they continue using affected library versions.</p>   
<p>Trusted software libraries have increasingly become targets for attackers. With a rise in security breaches and scams, platforms are encouraged to improve monitoring and regularly update systems to defend against similar risks in the future.</p>   
<p><strong>Protect yourself from the next big crypto hack. Share this Coinpedia article with your friends and family.</strong><br></p>

Crypto Hack Alert! Lottie Player Update Drains Wallets; Users at Risk

Table of Contents

CoinPedia News

Other articles published on Oct 31, 2024

Michael Saylor's Legacy: Donating His Bitcoin Wealth to Humanity, Inspired by Satoshi Nakamoto

Popular DeFi Platform 1inch Hit by Supply Chain Attack

Dogecoin Surges Amid Musk and Trump Connections

Magic Eden Remains The Leading NFT Marketplace In October 2024, With +400K Users

Here’s Why Whales Are Manipulating Kaspa (KAS) Price

Proto-Danksharding and Danksharding Explained

Join our free newsletter for daily crypto updates!