• bitcoinBitcoin (BTC) $ 119,008.00
  • ethereumEthereum (ETH) $ 2,995.61
  • xrpXRP (XRP) $ 2.86
  • tetherTether (USDT) $ 1.00
  • bnbBNB (BNB) $ 691.84
  • solanaSolana (SOL) $ 163.06
  • usd-coinUSDC (USDC) $ 0.999817
  • dogecoinDogecoin (DOGE) $ 0.202095
  • tronTRON (TRX) $ 0.304508
  • staked-etherLido Staked Ether (STETH) $ 2,993.89
  • cardanoCardano (ADA) $ 0.747159
  • hyperliquidHyperliquid (HYPE) $ 49.00
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 118,729.00
  • stellarStellar (XLM) $ 0.473199
  • wrapped-stethWrapped stETH (WSTETH) $ 3,622.39
  • suiSui (SUI) $ 3.52
  • chainlinkChainlink (LINK) $ 15.87
  • hedera-hashgraphHedera (HBAR) $ 0.244406
  • bitcoin-cashBitcoin Cash (BCH) $ 508.51
  • avalanche-2Avalanche (AVAX) $ 21.64
  • leo-tokenLEO Token (LEO) $ 9.03
  • wrapped-eethWrapped eETH (WEETH) $ 3,210.87
  • shiba-inuShiba Inu (SHIB) $ 0.000013
  • wethWETH (WETH) $ 2,995.79
  • the-open-networkToncoin (TON) $ 3.00
  • litecoinLitecoin (LTC) $ 96.51
  • usdsUSDS (USDS) $ 0.999797
  • whitebitWhiteBIT Coin (WBT) $ 46.20
  • binance-bridged-usdt-bnb-smart-chainBinance Bridged USDT (BNB Smart Chain) (BSC-USD) $ 1.00
  • moneroMonero (XMR) $ 339.61
  • polkadotPolkadot (DOT) $ 4.04
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 118,961.00
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • pepePepe (PEPE) $ 0.000013
  • uniswapUniswap (UNI) $ 8.64
  • bitget-tokenBitget Token (BGB) $ 4.39
  • aaveAave (AAVE) $ 312.97
  • bittensorBittensor (TAO) $ 398.39
  • daiDai (DAI) $ 0.999823
  • pi-networkPi Network (PI) $ 0.470991
  • crypto-com-chainCronos (CRO) $ 0.106234
  • aptosAptos (APT) $ 5.02
  • nearNEAR Protocol (NEAR) $ 2.58
  • ethena-staked-usdeEthena Staked USDe (SUSDE) $ 1.18
  • internet-computerInternet Computer (ICP) $ 5.53
  • okbOKB (OKB) $ 48.78
  • ondo-financeOndo (ONDO) $ 0.912342
  • jito-staked-solJito Staked SOL (JITOSOL) $ 198.20
  • ethereum-classicEthereum Classic (ETC) $ 18.60
  • blackrock-usd-institutional-digital-liquidity-fundBlackRock USD Institutional Digital Liquidity Fund (BUIDL) $ 1.00
  • mantleMantle (MNT) $ 0.691272
  • kaspaKaspa (KAS) $ 0.087592
  • algorandAlgorand (ALGO) $ 0.265773
  • susdssUSDS (SUSDS) $ 1.06
  • ethenaEthena (ENA) $ 0.349234
  • usd1-wlfiUSD1 (USD1) $ 0.999994
  • cosmosCosmos Hub (ATOM) $ 4.72
  • vechainVeChain (VET) $ 0.024994
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.233970
  • bonkBonk (BONK) $ 0.000027
  • arbitrumArbitrum (ARB) $ 0.418007
  • render-tokenRender (RENDER) $ 3.81
  • official-trumpOfficial Trump (TRUMP) $ 9.71
  • fasttokenFasttoken (FTN) $ 4.49
  • gatechain-tokenGate (GT) $ 15.90
  • pudgy-penguinsPudgy Penguins (PENGU) $ 0.030423
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 0.726370
  • worldcoin-wldWorldcoin (WLD) $ 1.07
  • sei-networkSei (SEI) $ 0.327047
  • binance-peg-wethBinance-Peg WETH (WETH) $ 2,994.01
  • filecoinFilecoin (FIL) $ 2.60
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 118,703.00
  • skySky (SKY) $ 0.079075
  • jupiter-perpetuals-liquidity-provider-tokenJupiter Perpetuals Liquidity Provider Token (JLP) $ 4.74
  • binance-staked-solBinance Staked SOL (BNSOL) $ 173.07
  • jupiter-exchange-solanaJupiter (JUP) $ 0.508670
  • spx6900SPX6900 (SPX) $ 1.58
  • kucoin-sharesKuCoin (KCS) $ 11.43
  • usdtbUSDtb (USDTB) $ 0.999737
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.998222
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 3,132.16
  • rocket-pool-ethRocket Pool ETH (RETH) $ 3,416.60
  • usdt0USDT0 (USDT0) $ 1.00
  • celestiaCelestia (TIA) $ 1.90
  • xdce-crowd-saleXDC Network (XDC) $ 0.083412
  • fartcoinFartcoin (FARTCOIN) $ 1.29
  • nexoNEXO (NEXO) $ 1.29
  • story-2Story (IP) $ 4.29
  • injective-protocolInjective (INJ) $ 12.64
  • blockstackStacks (STX) $ 0.799504
  • flare-networksFlare (FLR) $ 0.017258
  • sonic-3Sonic (S) $ 0.364851
  • optimismOptimism (OP) $ 0.665942
  • virtual-protocolVirtuals Protocol (VIRTUAL) $ 1.74
  • mantle-staked-etherMantle Staked Ether (METH) $ 3,204.60
  • stakewise-v3-osethStakeWise Staked ETH (OSETH) $ 3,147.80
  • solv-btcSolv Protocol BTC (SOLVBTC) $ 118,706.00
  • polygon-bridged-usdt-polygonPolygon Bridged USDT (Polygon) (USDT) $ 1.00
  • memecoreMemeCore (M) $ 0.653821
  • dogwifcoindogwifhat (WIF) $ 1.02
  • immutable-xImmutable (IMX) $ 0.541485
  • tokenize-xchangeTokenize Xchange (TKX) $ 12.60
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 3,156.82
  • binance-bridged-usdc-bnb-smart-chainBinance Bridged USDC (BNB Smart Chain) (USDC) $ 0.999891
  • the-graphThe Graph (GRT) $ 0.100474
  • flokiFLOKI (FLOKI) $ 0.000100
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 118,726.00
  • pax-goldPAX Gold (PAXG) $ 3,348.00
  • syrupusdcSyrupUSDC (SYRUPUSDC) $ 1.11
  • wbnbWrapped BNB (WBNB) $ 691.95
  • kaiaKaia (KAIA) $ 0.157599
  • curve-dao-tokenCurve DAO (CRV) $ 0.671749
  • clbtcclBTC (CLBTC) $ 118,497.00
  • liquid-staked-ethereumLiquid Staked ETH (LSETH) $ 3,238.78
  • paypal-usdPayPal USD (PYUSD) $ 0.999457
  • vaultaVaulta (A) $ 0.550464
  • iotaIOTA (IOTA) $ 0.217495
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 182.63
  • pancakeswap-tokenPancakeSwap (CAKE) $ 2.42
  • tether-goldTether Gold (XAUT) $ 3,346.91
  • theta-tokenTheta Network (THETA) $ 0.822861
  • msolMarinade Staked SOL (MSOL) $ 213.14
  • galaGALA (GALA) $ 0.017537
  • the-sandboxThe Sandbox (SAND) $ 0.320805
  • jasmycoinJasmyCoin (JASMY) $ 0.015972
  • lido-daoLido DAO (LDO) $ 0.844634
  • raydiumRaydium (RAY) $ 2.82
  • mog-coinMog Coin (MOG) $ 0.000002
  • ethereum-name-serviceEthereum Name Service (ENS) $ 22.36
  • superstate-short-duration-us-government-securities-fund-ustbSuperstate Short Duration U.S. Government Securities Fund (USTB) (USTB) $ 10.74
  • ousgOUSG (OUSG) $ 111.77
  • aerodrome-financeAerodrome Finance (AERO) $ 0.827057
  • pyth-networkPyth Network (PYTH) $ 0.121558
  • zcashZcash (ZEC) $ 42.99
  • tezosTezos (XTZ) $ 0.644618
  • bittorrentBitTorrent (BTT) $ 0.00000069
  • jito-governance-tokenJito (JTO) $ 1.94
  • usdx-money-usdxStables Labs USDX (USDX) $ 0.997831
  • super-oethSuper OETH (SUPEROETH) $ 2,995.48
  • saros-financeSaros (SAROS) $ 0.254062
  • wrapped-hypeWrapped HYPE (WHYPE) $ 49.03
  • mantle-restaked-ethMantle Restaked ETH (CMETH) $ 3,203.95
  • pendlePendle (PENDLE) $ 3.97
  • ondo-us-dollar-yieldOndo US Dollar Yield (USDY) $ 1.09
  • flowFlow (FLOW) $ 0.394170
  • cgeth-hashkey-cloudcgETH Hashkey Cloud (CGETH.HASH) $ 3,132.23
  • decentralandDecentraland (MANA) $ 0.325269
  • tbtctBTC (TBTC) $ 118,728.00
  • solv-protocol-solvbtc-bbnSolv Protocol Staked BTC (XSOLVBTC) $ 117,615.00
  • morphoMorpho (MORPHO) $ 1.95
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 2,995.50
  • chain-2Onyxcoin (XCN) $ 0.017530
  • newton-projectAB (AB) $ 0.008834
  • falcon-financeFalcon USD (USDF) $ 0.999656
  • heliumHelium (HNT) $ 3.21
  • usual-usdUsual USD (USD0) $ 0.998012
  • based-brettBrett (BRETT) $ 0.057750
  • coredaoorgCore (CORE) $ 0.563134
  • walrus-2Walrus (WAL) $ 0.407263
  • bitcoin-avalanche-bridged-btc-bAvalanche Bridged BTC (Avalanche) (BTC.B) $ 119,037.00
  • staked-hypeStaked HYPE (STHYPE) $ 49.01
  • thorchainTHORChain (RUNE) $ 1.54
  • apecoinApeCoin (APE) $ 0.674146
  • conflux-tokenConflux (CFX) $ 0.103635
  • bitcoin-svBitcoin SV (BSV) $ 26.73
  • syrupMaple Finance (SYRUP) $ 0.490057
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.202059
  • ripple-usdRipple USD (RLUSD) $ 0.999642
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 2,995.65
  • starknetStarknet (STRK) $ 0.141771
  • build-onBUILDon (B) $ 0.494286
  • true-usdTrueUSD (TUSD) $ 0.999274
  • usddUSDD (USDD) $ 1.00
  • kavaKava (KAVA) $ 0.438751
  • reserve-rights-tokenReserve Rights (RSR) $ 0.008084
  • stader-ethxStader ETHx (ETHX) $ 3,188.94
  • venomVenom (VENOM) $ 0.223514
  • dog-go-to-the-moon-runeDog (Bitcoin) (DOG) $ 0.004629
  • dydx-chaindYdX (DYDX) $ 0.611695
  • arweaveArweave (AR) $ 7.03
  • 1inch1inch (1INCH) $ 0.327565
  • elrond-erd-2MultiversX (EGLD) $ 15.85
  • bridged-usdc-polygon-pos-bridgeBridged USDC (Polygon PoS Bridge) (USDC.E) $ 0.999817
  • neoNEO (NEO) $ 6.38
  • beldexBeldex (BDX) $ 0.062603
  • apenftAPENFT (NFT) $ 0.00000045
  • telcoinTelcoin (TEL) $ 0.004848
  • compound-governance-tokenCompound (COMP) $ 47.10
  • ether-fiEther.fi (ETHFI) $ 1.18
  • aioz-networkAIOZ Network (AIOZ) $ 0.371873
  • dexeDeXe (DEXE) $ 7.64
  • deepDeepBook (DEEP) $ 0.173383
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 3,306.23
  • ecasheCash (XEC) $ 0.000021
  • axie-infinityAxie Infinity (AXS) $ 2.55
  • eigenlayerEigenCloud (prev. EigenLayer) (EIGEN) $ 1.35
  • hashnote-usycCircle USYC (USYC) $ 1.09
  • ether-fi-staked-btcEther.fi Staked BTC (EBTC) $ 117,872.00
  • zksyncZKsync (ZK) $ 0.056682
  • usdbUSDB (USDB) $ 0.996400

Warning: New Virus Detected That Drains Cryptocurrency Wallets – Here’s the Culprit Software and What to Do About It

0 19

Warning: New Virus Detected That Drains Cryptocurrency Wallets – Here’s the Culprit Software and What to Do About It

Cybersecurity firm SlowMist has revealed that an open-source project called “solana-pumpfun-bot”, which was published on GitHub and attracted attention in the community, contained a fraud scheme targeting user wallets. According to the company, cryptocurrencies in the wallets of users running the project were stolen and some of the funds were transferred to a platform called FixedFloat.

The incident came to light when a victimized user contacted the SlowMist team on July 2, 2025. According to the user’s statement, the cryptocurrencies in his wallet were stolen after he started using the “zldp2002/solana-pumpfun-bot” project on GitHub the day before.

SlowMist’s post-incident analysis found that the project was based on Node.js and relied on a suspicious third-party package called “crypto-layout-utils.” This package is not listed in NPM’s official records and has been removed from the platform. Investigations revealed that malicious developers had manipulated the link in the package-lock.json file to direct users to install malicious software.

SlowMist experts explained that the downloaded “crypto-layout-utils-1.3.1” package contained complex and obfuscated codes, and after analysis, these codes scanned the files containing wallets and private keys on the user’s computer and sent this data to a server belonging to the attacker named “githubshadow.xyz”.

In addition, the analysis reported that the GitHub user (zldp2002), who is alleged to be the developer of the project in question, controls a large number of fake accounts and aims to reach more users by forking the project through these accounts. In some forks, a different malicious NPM package, “bs58-encrypt-utils-1.0.3”, was used.

Following the incident, SlowMist tracked the attackers using an on-chain analysis tool called MistTrack, and found that the attackers had transferred some of the stolen cryptocurrencies to the FixedFloat platform. The malware attack is thought to have been active since June 12, 2025.

SlowMist said that users should be extremely careful about software downloaded from open source platforms such as GitHub, especially in projects that involve private keys or wallet operations. In cases of necessity, it was recommended that such projects be run on an isolated machine that does not contain sensitive data.

*This is not investment advice.

Source

Leave A Reply

Your email address will not be published.