• bitcoinBitcoin (BTC) $ 108,751.00
  • ethereumEthereum (ETH) $ 2,547.58
  • tetherTether (USDT) $ 1.00
  • xrpXRP (XRP) $ 2.27
  • bnbBNB (BNB) $ 662.18
  • solanaSolana (SOL) $ 151.64
  • usd-coinUSDC (USDC) $ 0.999901
  • tronTRON (TRX) $ 0.285648
  • dogecoinDogecoin (DOGE) $ 0.170600
  • staked-etherLido Staked Ether (STETH) $ 2,546.25
  • cardanoCardano (ADA) $ 0.584638
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 108,625.00
  • hyperliquidHyperliquid (HYPE) $ 39.51
  • wrapped-stethWrapped stETH (WSTETH) $ 3,072.81
  • suiSui (SUI) $ 2.90
  • bitcoin-cashBitcoin Cash (BCH) $ 496.92
  • chainlinkChainlink (LINK) $ 13.44
  • leo-tokenLEO Token (LEO) $ 9.02
  • avalanche-2Avalanche (AVAX) $ 18.22
  • stellarStellar (XLM) $ 0.246149
  • usdsUSDS (USDS) $ 0.999902
  • the-open-networkToncoin (TON) $ 2.92
  • shiba-inuShiba Inu (SHIB) $ 0.000012
  • wrapped-eethWrapped eETH (WEETH) $ 2,727.92
  • hedera-hashgraphHedera (HBAR) $ 0.159799
  • wethWETH (WETH) $ 2,546.96
  • litecoinLitecoin (LTC) $ 87.58
  • whitebitWhiteBIT Coin (WBT) $ 44.92
  • binance-bridged-usdt-bnb-smart-chainBinance Bridged USDT (BNB Smart Chain) (BSC-USD) $ 1.00
  • moneroMonero (XMR) $ 318.10
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 108,683.00
  • ethena-usdeEthena USDe (USDE) $ 0.999831
  • bitget-tokenBitget Token (BGB) $ 4.42
  • polkadotPolkadot (DOT) $ 3.37
  • uniswapUniswap (UNI) $ 7.43
  • aaveAave (AAVE) $ 278.30
  • pepePepe (PEPE) $ 0.000010
  • daiDai (DAI) $ 0.999938
  • pi-networkPi Network (PI) $ 0.476100
  • ethena-staked-usdeEthena Staked USDe (SUSDE) $ 1.18
  • bittensorBittensor (TAO) $ 327.56
  • okbOKB (OKB) $ 48.87
  • aptosAptos (APT) $ 4.47
  • blackrock-usd-institutional-digital-liquidity-fundBlackRock USD Institutional Digital Liquidity Fund (BUIDL) $ 1.00
  • jito-staked-solJito Staked SOL (JITOSOL) $ 184.13
  • nearNEAR Protocol (NEAR) $ 2.19
  • internet-computerInternet Computer (ICP) $ 4.84
  • ethereum-classicEthereum Classic (ETC) $ 16.66
  • crypto-com-chainCronos (CRO) $ 0.081318
  • ondo-financeOndo (ONDO) $ 0.799158
  • susdssUSDS (SUSDS) $ 1.06
  • usd1-wlfiUSD1 (USD1) $ 1.00
  • kaspaKaspa (KAS) $ 0.077610
  • mantleMantle (MNT) $ 0.573545
  • fasttokenFasttoken (FTN) $ 4.43
  • cosmosCosmos Hub (ATOM) $ 4.07
  • gatechain-tokenGate (GT) $ 15.41
  • vechainVeChain (VET) $ 0.020827
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 0.682701
  • official-trumpOfficial Trump (TRUMP) $ 8.66
  • bonkBonk (BONK) $ 0.000022
  • render-tokenRender (RENDER) $ 3.23
  • skySky (SKY) $ 0.078070
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.184298
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 108,450.00
  • ethenaEthena (ENA) $ 0.260752
  • arbitrumArbitrum (ARB) $ 0.333525
  • filecoinFilecoin (FIL) $ 2.29
  • binance-peg-wethBinance-Peg WETH (WETH) $ 2,547.21
  • algorandAlgorand (ALGO) $ 0.176901
  • jupiter-perpetuals-liquidity-provider-tokenJupiter Perpetuals Liquidity Provider Token (JLP) $ 4.50
  • worldcoin-wldWorldcoin (WLD) $ 0.891853
  • sei-networkSei (SEI) $ 0.265577
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.997862
  • usdtbUSDtb (USDTB) $ 0.999746
  • tokenize-xchangeTokenize Xchange (TKX) $ 18.05
  • binance-staked-solBinance Staked SOL (BNSOL) $ 160.71
  • kucoin-sharesKuCoin (KCS) $ 11.04
  • usdt0USDT0 (USDT0) $ 0.999612
  • jupiter-exchange-solanaJupiter (JUP) $ 0.450268
  • nexoNEXO (NEXO) $ 1.23
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 2,669.47
  • rocket-pool-ethRocket Pool ETH (RETH) $ 2,901.57
  • fartcoinFartcoin (FARTCOIN) $ 1.19
  • spx6900SPX6900 (SPX) $ 1.27
  • flare-networksFlare (FLR) $ 0.016545
  • celestiaCelestia (TIA) $ 1.54
  • polygon-bridged-usdt-polygonPolygon Bridged USDT (Polygon) (USDT) $ 1.00
  • injective-protocolInjective (INJ) $ 10.68
  • xdce-crowd-saleXDC Network (XDC) $ 0.063425
  • virtual-protocolVirtuals Protocol (VIRTUAL) $ 1.56
  • blockstackStacks (STX) $ 0.660505
  • pudgy-penguinsPudgy Penguins (PENGU) $ 0.016001
  • sonic-3Sonic (S) $ 0.311675
  • binance-bridged-usdc-bnb-smart-chainBinance Bridged USDC (BNB Smart Chain) (USDC) $ 0.999873
  • mantle-staked-etherMantle Staked Ether (METH) $ 2,722.13
  • stakewise-v3-osethStakeWise Staked ETH (OSETH) $ 2,674.79
  • optimismOptimism (OP) $ 0.542986
  • syrupusdcSyrupUSDC (SYRUPUSDC) $ 1.11
  • pax-goldPAX Gold (PAXG) $ 3,345.54
  • solv-btcSolv Protocol BTC (SOLVBTC) $ 108,811.00
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 108,813.00
  • kaiaKaia (KAIA) $ 0.152112
  • dogwifcoindogwifhat (WIF) $ 0.883427
  • wbnbWrapped BNB (WBNB) $ 662.34
  • story-2Story (IP) $ 3.04
  • paypal-usdPayPal USD (PYUSD) $ 0.999452
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 2,680.70
  • clbtcclBTC (CLBTC) $ 109,424.00
  • the-graphThe Graph (GRT) $ 0.084956
  • tether-goldTether Gold (XAUT) $ 3,335.42
  • flokiFLOKI (FLOKI) $ 0.000084
  • immutable-xImmutable (IMX) $ 0.422668
  • pancakeswap-tokenPancakeSwap (CAKE) $ 2.27
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 170.15
  • vaultaVaulta (A) $ 0.483737
  • msolMarinade Staked SOL (MSOL) $ 198.02
  • liquid-staked-ethereumLiquid Staked ETH (LSETH) $ 2,751.40
  • ousgOUSG (OUSG) $ 111.69
  • theta-tokenTheta Network (THETA) $ 0.702694
  • curve-dao-tokenCurve DAO (CRV) $ 0.503213
  • jito-governance-tokenJito (JTO) $ 1.99
  • superstate-short-duration-us-government-securities-fund-ustbSuperstate Short Duration U.S. Government Securities Fund (USTB) (USTB) $ 10.73
  • usdx-money-usdxStables Labs USDX (USDX) $ 0.997725
  • lido-daoLido DAO (LDO) $ 0.737807
  • galaGALA (GALA) $ 0.014230
  • zcashZcash (ZEC) $ 39.36
  • ondo-us-dollar-yieldOndo US Dollar Yield (USDY) $ 1.09
  • ethereum-name-serviceEthereum Name Service (ENS) $ 18.71
  • wrapped-hypeWrapped HYPE (WHYPE) $ 39.51
  • iotaIOTA (IOTA) $ 0.158765
  • the-sandboxThe Sandbox (SAND) $ 0.245750
  • aerodrome-financeAerodrome Finance (AERO) $ 0.706030
  • bittorrentBitTorrent (BTT) $ 0.00000061
  • jasmycoinJasmyCoin (JASMY) $ 0.012296
  • saros-financeSaros (SAROS) $ 0.226767
  • syrupMaple Finance (SYRUP) $ 0.553749
  • solv-protocol-solvbtc-bbnSolv Protocol Staked BTC (XSOLVBTC) $ 108,328.00
  • usual-usdUsual USD (USD0) $ 0.998128
  • raydiumRaydium (RAY) $ 2.19
  • tbtctBTC (TBTC) $ 108,745.00
  • walrus-2Walrus (WAL) $ 0.414185
  • super-oethSuper OETH (SUPEROETH) $ 2,547.21
  • pyth-networkPyth Network (PYTH) $ 0.099185
  • pendlePendle (PENDLE) $ 3.40
  • tezosTezos (XTZ) $ 0.529556
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 2,546.87
  • mantle-restaked-ethMantle Restaked ETH (CMETH) $ 2,720.78
  • falcon-financeFalcon USD (USDF) $ 0.999985
  • newton-projectAB (AB) $ 0.008108
  • cgeth-hashkey-cloudcgETH Hashkey Cloud (CGETH.HASH) $ 2,673.79
  • flowFlow (FLOW) $ 0.327163
  • bitcoin-avalanche-bridged-btc-bAvalanche Bridged BTC (Avalanche) (BTC.B) $ 108,700.00
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 2,546.91
  • decentralandDecentraland (MANA) $ 0.265412
  • coredaoorgCore (CORE) $ 0.502640
  • true-usdTrueUSD (TUSD) $ 0.997497
  • staked-hypeStaked HYPE (STHYPE) $ 39.50
  • apecoinApeCoin (APE) $ 0.611884
  • venomVenom (VENOM) $ 0.232418
  • bitcoin-svBitcoin SV (BSV) $ 24.42
  • ripple-usdRipple USD (RLUSD) $ 0.999915
  • chain-2Onyxcoin (XCN) $ 0.013988
  • bridged-usdc-polygon-pos-bridgeBridged USDC (Polygon PoS Bridge) (USDC.E) $ 0.999900
  • thorchainTHORChain (RUNE) $ 1.34
  • dog-go-to-the-moon-runeDog (Bitcoin) (DOG) $ 0.004638
  • based-brettBrett (BRETT) $ 0.044239
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.170456
  • morphoMorpho (MORPHO) $ 1.40
  • apenftAPENFT (NFT) $ 0.00000044
  • dexeDeXe (DEXE) $ 7.57
  • beldexBeldex (BDX) $ 0.060431
  • kavaKava (KAVA) $ 0.395218
  • usddUSDD (USDD) $ 0.999832
  • reserve-rights-tokenReserve Rights (RSR) $ 0.007178
  • heliumHelium (HNT) $ 2.24
  • hashnote-usycCircle USYC (USYC) $ 1.09
  • starknetStarknet (STRK) $ 0.113326
  • usdbUSDB (USDB) $ 0.998901
  • movementMovement (MOVE) $ 0.155154
  • mog-coinMog Coin (MOG) $ 0.000001
  • dydx-chaindYdX (DYDX) $ 0.525933
  • stader-ethxStader ETHx (ETHX) $ 2,710.31
  • compound-governance-tokenCompound (COMP) $ 41.33
  • neoNEO (NEO) $ 5.44
  • mantle-bridged-usdt-mantleMantle Bridged USDT (Mantle) (USDT) $ 1.00
  • elrond-erd-2MultiversX (EGLD) $ 13.37
  • conflux-tokenConflux (CFX) $ 0.074318
  • kaitoKAITO (KAITO) $ 1.55
  • ecasheCash (XEC) $ 0.000019
  • aioz-networkAIOZ Network (AIOZ) $ 0.312662
  • build-onBUILDon (B) $ 0.373015
  • deepDeepBook (DEEP) $ 0.146327
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 2,543.93
  • ether-fi-staked-btcEther.fi Staked BTC (EBTC) $ 108,509.00
  • eigenlayerEigenCloud (prev. EigenLayer) (EIGEN) $ 1.16
  • axie-infinityAxie Infinity (AXS) $ 2.18
  • telcoinTelcoin (TEL) $ 0.003904
  • ether-fiEther.fi (ETHFI) $ 0.947849
  • polygon-pos-bridged-dai-polygon-posPolygon PoS Bridged DAI (Polygon POS) (DAI) $ 0.999897

Coinbase Avoids a Major Supply Chain Attack On Its Blockchain AI Toolkit

0 21

Coinbase Avoids a Major Supply Chain Attack On Its Blockchain AI Toolkit

Coinbase, the largest crypto exchange in the US, has successfully evaded a supply chain attack that could have compromised its open-source infrastructure.

On March 23, Yu Jian, founder of blockchain security firm SlowMist, flagged the incident in a post on X, referencing a report from Unit 42, the threat intelligence division of Palo Alto Networks.

How Coinbase Stopped a Major Cyber Attack

According to Unit 42, the attacker targeted ‘agentkit’, an open-source toolkit managed by Coinbase that supports blockchain-based AI agents.

The threat actor forked agentkit and onchainkit repositories on GitHub, inserting malicious code intended to exploit the continuous integration pipeline. The suspicious activity was first detected on March 14, 2025.

“The payload was focused on exploiting the public CI/CD flow of one of their open source projects – agentkit, probably with the purpose of leveraging it for further compromises,” Unit 42 reported.

The attacker exploited GitHub’s “write-all” permissions, which allowed the injection of harmful code into the project’s automated workflow. This method could have enabled access to sensitive data and created a path for broader compromises.

A Malicious Commit Targeting Coinbase. Source: Unit42

However, Unit 42 reported that the payload collected sensitive information. It did not contain advanced malicious tools like remote code execution or reverse shell exploits.

Meanwhile, Coinbase responded quickly, collaborating with security experts to isolate the threat and apply necessary mitigations. This rapid action helped the company avoid deeper infiltration and prevented potential damage to its infrastructure.

The stakes were high considering Coinbase’s standing as the largest crypto exchange in the US and a key custodian for spot Bitcoin ETFs.

A breach of this nature could have caused major disruption across the crypto industry, especially after Bybit’s recent $1.4 billion security incident.

Despite the failed attempt, the attacker has since shifted focus to a larger campaign now drawing global attention.

In light of this, SlowMist founder advised developers using GitHub Actions—especially those working with tj-actions or reviewdog—to audit their systems and confirm that no secrets have been exposed.

“If your company uses reviewdog or tj-actions, do a thorough self-examination,” Yu Jian stated on X.

This incident highlights the growing importance of securing open-source tools as the crypto ecosystem expands. Data from DeFillama shows that the crypto industry has recorded exploits of more than $1.5 billion this year.

Source

Leave A Reply

Your email address will not be published.