Chain News Today TheBitTimes.com

A widespread security supply chain attack led to panic across the crypto community yesterday with users warned to “refrain from making any on-chain transactions.” Researchers at security firm Aikido raised the alarm after discovering that 18 popular node package manager (npm) packages contained malicious code. After being notified, the developer who maintains the popular npm packages, alias Qix, confirmed the compromise. He’d been “pwned” via a phishing email which “looked very legitimate.” Despite the packages being widespread across the crypto industry, the attack led to almost no losses. Samczsun, the head of Security Alliance, a blockchain security collective, called the result a “generational fumble.” my sincerest condolences to the person responsible for this, this was a generational fumble, the likes of which we will probably never see again https://t.co/nfiTU5K0Ig — samczsun (@samczsun) September 8, 2025 Read more: ‘Decentralized’ apps suff...

Yesterday, lending platform Radiant Capital suffered a loss of over $50 million worth of crypto when the project’s multisig wallet was compromised. The incident offers a stark reminder of the importance of key management in the industry, and the potential for damage when signer addresses are compromised. According to blockchain security firm SlowMist, private keys to three of 11 addresses were compromised in order to “transfer ownership of the LendingPoolAddressesProvider contract to a malicious contract controlled by the attacker.” This was then used to drain lending markets on two networks: Arbitrum and BNB Chain. #ancilia_alerts It seems like something happen with @RDNTCapital contract on BSC. We have noticed several transferFrom user's account through the contract 0xd50cf00b6e600dd036ba8ef475677d816d6c4281. Please revoke your approval ASAP. It seems like the new implementation had… — Ancilia, Inc. (@AnciliaInc) October 16, 2024 Read more: Three DeFi hacks net $10 mi...