1inch Network

A recent security breach has hit the <a href="https://optimisus.com/news/blockchain-news/1inch-teams-up-with-blockaid-to-enhance-web3-security/" rel="noopener noreferrer nofollow">decentralized exchange aggregator 1inch</a> and other platforms like TEN Finance, stemming from malicious code embedded in the Lottie Player animation library.This vulnerability affects versions 2.0.5 and later of Lottie Player, allowing unauthorized transactions that jeopardize users&#39; funds and personal information. Experts are urging users to steer clear of these platforms until the issues are fully addressed.The attack originated from compromised JSON files within the Lottie Player library, enabling affected websites to perform unauthorized actions. According to Blockaid, a cybersecurity firm, the breach was linked to a corrupted npm package on Lottie Player’s content server.Attackers managed to insert harmful scripts, even bypassing security measures. Alarmingly, legitimate sites outside the crypto realm may also be unwittingly distributing this malicious content. While <a href="https://optimisus.com/news/crypto-news/millions-of-dollars-in-1inch-tokens-unlocked-in-december/" rel="noopener noreferrer nofollow">1inch</a> has yet to release an official statement on the breach, the Lottie Player team is actively working to rectify the situation.This incident highlights a troubling trend of escalating cyberattacks in the cryptocurrency space. The industry has seen increasingly sophisticated breaches, with recent hacks resulting in significant losses, such as $20 million stolen from the U.S. government and over $50 million from blockchain lender Radiant Capital due to compromised private keys.In response to the growing threat, federal investigations into crypto crimes have ramped up. The FBI recently arrested Eric Council Jr. for allegedly hacking the SEC’s X (formerly Twitter) account and spreading false information about Bitcoin ETF approvals, which disrupted the market. Although he is currently in custody, authorities believe he may not be the primary orchestrator of the hack and are discussing a plea deal with him.

1inch compromised by major hack in supply chain attack

Optimisus

Other articles published on Nov 2, 2024

Ripple’s Q3 2024 markets report addresses US SEC, RLUSD, and XRP-Spot ETF filing

Whales Are Betting Big on Solana—Here’s Why You Should Too!

Analysis Company Makes Prediction for Bitcoin After the US Election: “Even If Donald Trump Wins…”

Sui Announces Integration with Google Cloud to Boost Real-Time Blockchain Data Access

Political Humor Meets Crypto: The 5 Meme Coins Making Waves

Can Dogecoin and Shiba Inu Reach New Highs This Month? Expert Recommends XYZVerse Instead

Join our free newsletter for daily crypto updates!