• bitcoinBitcoin (BTC) $ 109,139.00
  • ethereumEthereum (ETH) $ 2,577.09
  • tetherTether (USDT) $ 1.00
  • xrpXRP (XRP) $ 2.24
  • bnbBNB (BNB) $ 660.28
  • solanaSolana (SOL) $ 152.56
  • usd-coinUSDC (USDC) $ 0.999892
  • tronTRON (TRX) $ 0.286025
  • dogecoinDogecoin (DOGE) $ 0.169641
  • staked-etherLido Staked Ether (STETH) $ 2,576.30
  • cardanoCardano (ADA) $ 0.590494
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 109,058.00
  • hyperliquidHyperliquid (HYPE) $ 39.23
  • wrapped-stethWrapped stETH (WSTETH) $ 3,113.53
  • suiSui (SUI) $ 2.99
  • bitcoin-cashBitcoin Cash (BCH) $ 489.98
  • chainlinkChainlink (LINK) $ 13.55
  • leo-tokenLEO Token (LEO) $ 9.03
  • avalanche-2Avalanche (AVAX) $ 18.79
  • stellarStellar (XLM) $ 0.240577
  • usdsUSDS (USDS) $ 0.999688
  • wethWETH (WETH) $ 2,576.99
  • the-open-networkToncoin (TON) $ 2.82
  • shiba-inuShiba Inu (SHIB) $ 0.000012
  • litecoinLitecoin (LTC) $ 88.75
  • wrapped-eethWrapped eETH (WEETH) $ 2,760.89
  • hedera-hashgraphHedera (HBAR) $ 0.157493
  • whitebitWhiteBIT Coin (WBT) $ 43.64
  • binance-bridged-usdt-bnb-smart-chainBinance Bridged USDT (BNB Smart Chain) (BSC-USD) $ 1.00
  • moneroMonero (XMR) $ 321.17
  • polkadotPolkadot (DOT) $ 3.50
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • bitget-tokenBitget Token (BGB) $ 4.51
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 109,156.00
  • uniswapUniswap (UNI) $ 7.39
  • aaveAave (AAVE) $ 275.72
  • pepePepe (PEPE) $ 0.000010
  • pi-networkPi Network (PI) $ 0.484229
  • daiDai (DAI) $ 0.999932
  • ethena-staked-usdeEthena Staked USDe (SUSDE) $ 1.18
  • aptosAptos (APT) $ 4.69
  • okbOKB (OKB) $ 49.96
  • bittensorBittensor (TAO) $ 333.78
  • blackrock-usd-institutional-digital-liquidity-fundBlackRock USD Institutional Digital Liquidity Fund (BUIDL) $ 1.00
  • nearNEAR Protocol (NEAR) $ 2.23
  • jito-staked-solJito Staked SOL (JITOSOL) $ 185.45
  • internet-computerInternet Computer (ICP) $ 4.94
  • crypto-com-chainCronos (CRO) $ 0.082491
  • ethereum-classicEthereum Classic (ETC) $ 16.80
  • ondo-financeOndo (ONDO) $ 0.782609
  • susdssUSDS (SUSDS) $ 1.06
  • usd1-wlfiUSD1 (USD1) $ 1.00
  • kaspaKaspa (KAS) $ 0.077867
  • mantleMantle (MNT) $ 0.579629
  • tokenize-xchangeTokenize Xchange (TKX) $ 24.24
  • gatechain-tokenGate (GT) $ 15.83
  • fasttokenFasttoken (FTN) $ 4.43
  • cosmosCosmos Hub (ATOM) $ 4.13
  • vechainVeChain (VET) $ 0.021671
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 0.708945
  • official-trumpOfficial Trump (TRUMP) $ 8.84
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 109,049.00
  • skySky (SKY) $ 0.079811
  • render-tokenRender (RENDER) $ 3.26
  • arbitrumArbitrum (ARB) $ 0.338427
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.186364
  • ethenaEthena (ENA) $ 0.270752
  • filecoinFilecoin (FIL) $ 2.37
  • quant-networkQuant (QNT) $ 108.93
  • worldcoin-wldWorldcoin (WLD) $ 0.927384
  • binance-peg-wethBinance-Peg WETH (WETH) $ 2,577.55
  • algorandAlgorand (ALGO) $ 0.177969
  • jupiter-perpetuals-liquidity-provider-tokenJupiter Perpetuals Liquidity Provider Token (JLP) $ 4.52
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.999003
  • usdtbUSDtb (USDTB) $ 0.999924
  • sei-networkSei (SEI) $ 0.261572
  • kucoin-sharesKuCoin (KCS) $ 11.05
  • binance-staked-solBinance Staked SOL (BNSOL) $ 161.73
  • jupiter-exchange-solanaJupiter (JUP) $ 0.458436
  • bonkBonk (BONK) $ 0.000017
  • usdt0USDT0 (USDT0) $ 0.999253
  • rocket-pool-ethRocket Pool ETH (RETH) $ 2,937.50
  • nexoNEXO (NEXO) $ 1.20
  • fartcoinFartcoin (FARTCOIN) $ 1.21
  • triniqueTNQ (TNQ) $ 10.26
  • spx6900SPX6900 (SPX) $ 1.27
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 2,699.79
  • flare-networksFlare (FLR) $ 0.016910
  • celestiaCelestia (TIA) $ 1.62
  • injective-protocolInjective (INJ) $ 11.44
  • virtual-protocolVirtuals Protocol (VIRTUAL) $ 1.64
  • polygon-bridged-usdt-polygonPolygon Bridged USDT (Polygon) (USDT) $ 1.00
  • sonic-3Sonic (S) $ 0.326200
  • blockstackStacks (STX) $ 0.675225
  • pudgy-penguinsPudgy Penguins (PENGU) $ 0.016342
  • binance-bridged-usdc-bnb-smart-chainBinance Bridged USDC (BNB Smart Chain) (USDC) $ 0.999731
  • optimismOptimism (OP) $ 0.564660
  • xdce-crowd-saleXDC Network (XDC) $ 0.060350
  • mantle-staked-etherMantle Staked Ether (METH) $ 2,747.34
  • stakewise-v3-osethStakeWise Staked ETH (OSETH) $ 2,706.02
  • kaiaKaia (KAIA) $ 0.161304
  • pax-goldPAX Gold (PAXG) $ 3,345.21
  • syrupusdcSyrupUSDC (SYRUPUSDC) $ 1.11
  • solv-btcSolv Protocol BTC (SOLVBTC) $ 109,222.00
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 108,991.00
  • dogwifcoindogwifhat (WIF) $ 0.891652
  • wbnbWrapped BNB (WBNB) $ 660.30
  • paypal-usdPayPal USD (PYUSD) $ 0.999747
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 2,710.62
  • the-graphThe Graph (GRT) $ 0.086273
  • immutable-xImmutable (IMX) $ 0.455553
  • clbtcclBTC (CLBTC) $ 109,812.00
  • story-2Story (IP) $ 2.93
  • tether-goldTether Gold (XAUT) $ 3,337.07
  • vaultaVaulta (A) $ 0.491876
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 171.37
  • msolMarinade Staked SOL (MSOL) $ 199.49
  • flokiFLOKI (FLOKI) $ 0.000078
  • liquid-staked-ethereumLiquid Staked ETH (LSETH) $ 2,785.13
  • pancakeswap-tokenPancakeSwap (CAKE) $ 2.30
  • jito-governance-tokenJito (JTO) $ 2.09
  • curve-dao-tokenCurve DAO (CRV) $ 0.523351
  • theta-tokenTheta Network (THETA) $ 0.710477
  • ousgOUSG (OUSG) $ 111.69
  • superstate-short-duration-us-government-securities-fund-ustbSuperstate Short Duration U.S. Government Securities Fund (USTB) (USTB) $ 10.73
  • lido-daoLido DAO (LDO) $ 0.762613
  • usdx-money-usdxStables Labs USDX (USDX) $ 0.998343
  • galaGALA (GALA) $ 0.014540
  • zcashZcash (ZEC) $ 40.61
  • aerodrome-financeAerodrome Finance (AERO) $ 0.768111
  • ethereum-name-serviceEthereum Name Service (ENS) $ 19.15
  • ondo-us-dollar-yieldOndo US Dollar Yield (USDY) $ 1.09
  • iotaIOTA (IOTA) $ 0.161109
  • wrapped-hypeWrapped HYPE (WHYPE) $ 39.25
  • the-sandboxThe Sandbox (SAND) $ 0.251008
  • bittorrentBitTorrent (BTT) $ 0.00000062
  • walrus-2Walrus (WAL) $ 0.438218
  • jasmycoinJasmyCoin (JASMY) $ 0.012435
  • solv-protocol-solvbtc-bbnSolv Protocol Staked BTC (XSOLVBTC) $ 109,267.00
  • pyth-networkPyth Network (PYTH) $ 0.102591
  • usual-usdUsual USD (USD0) $ 0.997594
  • saros-financeSaros (SAROS) $ 0.222186
  • syrupMaple Finance (SYRUP) $ 0.542010
  • raydiumRaydium (RAY) $ 2.15
  • tezosTezos (XTZ) $ 0.548705
  • super-oethSuper OETH (SUPEROETH) $ 2,577.86
  • tbtctBTC (TBTC) $ 109,031.00
  • pendlePendle (PENDLE) $ 3.45
  • mantle-restaked-ethMantle Restaked ETH (CMETH) $ 2,747.22
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 2,575.85
  • cgeth-hashkey-cloudcgETH Hashkey Cloud (CGETH.HASH) $ 2,733.17
  • falcon-financeFalcon USD (USDF) $ 0.999874
  • flowFlow (FLOW) $ 0.334726
  • newton-projectAB (AB) $ 0.008000
  • bitcoin-avalanche-bridged-btc-bAvalanche Bridged BTC (Avalanche) (BTC.B) $ 109,373.00
  • coredaoorgCore (CORE) $ 0.509179
  • decentralandDecentraland (MANA) $ 0.265544
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 2,576.99
  • apecoinApeCoin (APE) $ 0.620518
  • true-usdTrueUSD (TUSD) $ 0.997714
  • chain-2Onyxcoin (XCN) $ 0.014353
  • thorchainTHORChain (RUNE) $ 1.38
  • ripple-usdRipple USD (RLUSD) $ 0.999679
  • bitcoin-svBitcoin SV (BSV) $ 24.07
  • staked-hypeStaked HYPE (STHYPE) $ 39.31
  • bridged-usdc-polygon-pos-bridgeBridged USDC (Polygon PoS Bridge) (USDC.E) $ 0.999908
  • apenftAPENFT (NFT) $ 0.00000044
  • kavaKava (KAVA) $ 0.403265
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.169456
  • beldexBeldex (BDX) $ 0.060663
  • based-brettBrett (BRETT) $ 0.043646
  • morphoMorpho (MORPHO) $ 1.39
  • dog-go-to-the-moon-runeDog (Bitcoin) (DOG) $ 0.004285
  • usddUSDD (USDD) $ 1.00
  • dexeDeXe (DEXE) $ 7.45
  • movementMovement (MOVE) $ 0.162043
  • heliumHelium (HNT) $ 2.28
  • starknetStarknet (STRK) $ 0.115949
  • reserve-rights-tokenReserve Rights (RSR) $ 0.007193
  • venomVenom (VENOM) $ 0.199704
  • hashnote-usycCircle USYC (USYC) $ 1.09
  • dydx-chaindYdX (DYDX) $ 0.545415
  • usdbUSDB (USDB) $ 0.999779
  • mog-coinMog Coin (MOG) $ 0.000001
  • compound-governance-tokenCompound (COMP) $ 42.76
  • build-onBUILDon (B) $ 0.401009
  • stader-ethxStader ETHx (ETHX) $ 2,758.89
  • neoNEO (NEO) $ 5.64
  • elrond-erd-2MultiversX (EGLD) $ 13.91
  • conflux-tokenConflux (CFX) $ 0.075396
  • kaitoKAITO (KAITO) $ 1.59
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 2,576.83
  • ecasheCash (XEC) $ 0.000019
  • axie-infinityAxie Infinity (AXS) $ 2.27
  • ketKet (KET) $ 0.374365
  • deepDeepBook (DEEP) $ 0.148318
  • mantle-bridged-usdt-mantleMantle Bridged USDT (Mantle) (USDT) $ 0.998871
  • aioz-networkAIOZ Network (AIOZ) $ 0.310451
  • ether-fi-staked-btcEther.fi Staked BTC (EBTC) $ 108,927.00
  • ether-fiEther.fi (ETHFI) $ 0.972031

Warning: New Virus Detected That Drains Cryptocurrency Wallets – Here’s the Culprit Software and What to Do About It

0 13

Warning: New Virus Detected That Drains Cryptocurrency Wallets – Here’s the Culprit Software and What to Do About It

Cybersecurity firm SlowMist has revealed that an open-source project called “solana-pumpfun-bot”, which was published on GitHub and attracted attention in the community, contained a fraud scheme targeting user wallets. According to the company, cryptocurrencies in the wallets of users running the project were stolen and some of the funds were transferred to a platform called FixedFloat.

The incident came to light when a victimized user contacted the SlowMist team on July 2, 2025. According to the user’s statement, the cryptocurrencies in his wallet were stolen after he started using the “zldp2002/solana-pumpfun-bot” project on GitHub the day before.

SlowMist’s post-incident analysis found that the project was based on Node.js and relied on a suspicious third-party package called “crypto-layout-utils.” This package is not listed in NPM’s official records and has been removed from the platform. Investigations revealed that malicious developers had manipulated the link in the package-lock.json file to direct users to install malicious software.

SlowMist experts explained that the downloaded “crypto-layout-utils-1.3.1” package contained complex and obfuscated codes, and after analysis, these codes scanned the files containing wallets and private keys on the user’s computer and sent this data to a server belonging to the attacker named “githubshadow.xyz”.

In addition, the analysis reported that the GitHub user (zldp2002), who is alleged to be the developer of the project in question, controls a large number of fake accounts and aims to reach more users by forking the project through these accounts. In some forks, a different malicious NPM package, “bs58-encrypt-utils-1.0.3”, was used.

Following the incident, SlowMist tracked the attackers using an on-chain analysis tool called MistTrack, and found that the attackers had transferred some of the stolen cryptocurrencies to the FixedFloat platform. The malware attack is thought to have been active since June 12, 2025.

SlowMist said that users should be extremely careful about software downloaded from open source platforms such as GitHub, especially in projects that involve private keys or wallet operations. In cases of necessity, it was recommended that such projects be run on an isolated machine that does not contain sensitive data.

*This is not investment advice.

Source

Leave A Reply

Your email address will not be published.