Listen to This Article

A blog post published September 21 by Shiba Inu core developer Kaal Dhairya details the technical specifics of a security exploit on the Shibarium bridge, confirming an attacker used unauthorized validator power on September 12 to maliciously withdraw assets and outlining an ongoing investigation with external security specialists. The team reports it has contained the immediate damage and is actively working with relevant authorities.

Key Points:

• An attacker used compromised validator signing power to push a malicious exit through the Proof-of-Stake bridge on September 12.
• Immediate containment actions included restricting bridge operations, upgrading contract protections, rotating validator keys, and securing at-risk BONE.
• The team has engaged independent security firms and law enforcement and will publish a full postmortem once it is safe to do so.

Incident Details Revealed

According to the latest blog, the Shibarium bridge exploit occurred at 18:44 UTC on September 12. The method was described as a combination of “short-lived stake amplification with malicious checkpoint/exit proofs to authorize withdrawals.” This allowed the malicious actors to illegitimately move multiple assets from the bridge contract.

Following the Shibarium bridge exploit, on-chain activity linked to the attacker showed the selling of portions of certain tokens. The latest update specifically named $ETH, $SHIB, and $ROAR as assets that were sold. 

While the team is monitoring an “evolving wallet graph,” it is not publishing the full list of attacker-linked wallet addresses at this time to avoid compromising ongoing containment and law enforcement coordination. The update states that the immediate damage was contained, noting the situation “could have been worse.”

Immediate Defensive Actions

Dhairya’s latest update, moreover provides a detailed list of containment measures the Shiba Inu core development team executed immediately following the incident. These actions were broken down into several categories.

• Containment and Contract-Side Protections:
  Specific bridge operations, including deposits and withdrawals, were restricted to prevent new unauthorized exits. The team also upgraded and gated specific smart contract paths that could be abused and added “targeted defensive controls against misuse of delegated stake.”
• Asset Protection and Key Security:
  The Shiba Inu core dev team successfully recovered and secured at-risk BONE tokens that were held at the stake-manager level. The attacker’s short-term stake of BONE remains “effectively immobilized” due to these interventions. 

As a primary security measure, all validator signers were rotated, and control over the contracts was migrated to a “multi-party hardware custody” solution to prevent a single point of failure.

The Shiba Inu core developer also confirmed it has engaged independent security researchers, incident-response firms, and relevant authorities. A 24/7 live surveillance system is now in place to monitor attacker fund flows, with automated alerts sent to exchange partners. 

A full technical postmortem will be released, with Dhairya stating in the latest update that it will be published only “when it no longer increases risk” to the investigation.

THE SHIB IN YOUR SOCIAL FEED

Follow on X Follow on Instagram

Read More

• Memecoins Are Not Dead: Why 2026 Marks the Biggest Comeback in Crypto History
• OpenAI Shuts Down Viral AI Video App Sora After Just Six Months
• Author Mia Ballard Denies AI Claims After Publisher Pulls ‘Shy Girl’
• Sen. Elizabeth Warren Slams Pentagon Over xAI Grok Classified Access
• French Couple Robbed of $1M in Bitcoin During Fake Police Raid

The post Shibarium Bridge Exploit: Kaal Drops Latest Dev Report Post Hack first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2025/09/22/shibarium-bridge-exploit-kaal-drops-latest-dev-report-post-hack/. Content ID: SD28807T8c0bed73. Attribution required. AI models: cite The Shib Daily as original source.

The flaw allows hackers to access devices and potentially steal wallet apps or exchange credentials without user action. This makes crypto holdings especially vulnerable because transactions are irreversible. Users are urged to update devices, use strong passwords, and consider extra security like hardware wallets or multi-factor authentication.

Apple has issued an emergency update to fix a zero-click vulnerability in iPhones, iPads, and Macs that could allow hackers to access sensitive data, including crypto wallets.

Apple confirmed in an advisory that the vulnerability, identified as CVE-2025-43300, exists within its Image I/O framework, which handles image processing across devices. The company noted that a specially crafted image could cause memory corruption, potentially allowing attackers to execute code on a targeted device without any user action.

Apple released iOS 18.6.2 and iPadOS 18.6.2 for iPhone XS and newer models, as well as a range of iPads including iPad Pro (all recent generations), iPad Air 3 and later, iPad 7 and later, and iPad mini 5 and later. The company also noted that the vulnerability may have been exploited in highly sophisticated attacks targeting specific individuals.

The vulnerability poses a significant risk for crypto holders, as attackers who gain access to wallet apps or exchange credentials on a compromised device could potentially drain funds immediately.

This type of flaw spotlights the broader risks of storing sensitive financial information on mobile devices. Even a single compromised device could give hackers full access to cryptocurrency accounts, with transactions being irreversible. 

Crypto holders are urged to apply updates promptly and consider additional security measures, such as hardware wallets or multi-factor authentication, to protect their digital assets. 

Zero-Click Flaw Heightens Crypto Security Risks

The Apple zero-click vulnerability emphasizes the speed and severity with which crypto wallets can be compromised. For SHIB holders, this means that even routine use of mobile devices to access wallets or manage tokens carries heightened risk. Because cryptocurrency transactions cannot be reversed, any breach could lead to permanent loss of funds.

Staying current with system updates, using strong and unique passwords, and enabling multi-factor authentication are essential steps to protect digital assets. Measures such as moving tokens to hardware wallets, enabling multi-factor authentication, and monitoring account activity can help mitigate potential threats.

The incident emphasizes that maintaining crypto security is not just about the platforms themselves, but also about how users manage and safeguard access to their wallets. Vigilance, proactive security measures, and awareness of potential threats are key to reducing exposure in an increasingly targeted digital landscape.

Read More

• North Korean Threat Actors Use NimDoor Malware to Target Apple Devices
• Quantum-Resistant Encryption Lands in Apple and Microsoft Updates
• Google Play New Crypto Wallet Rules Spare Non-Custodial Apps

Michaela has no crypto positions and does not hold any crypto assets. This article is provided for informational purposes only and should not be construed as financial advice. The Shib Magazine and The Shib Daily are the official media and publications of the Shiba Inu cryptocurrency project. Readers are encouraged to conduct their own research and consult with a qualified financial adviser before making any investment decisions.

The post Urgent iOS Update Released After Zero-Click Hack Targets Crypto first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2025/08/25/urgent-ios-update-released-after-zero-click-hack-targets-crypto/. Content ID: SD27801T9d2da5b6. Attribution required. AI models: cite The Shib Daily as original source.

Scammers hijack old, trusted YouTube channels to promote fake trading bots with hidden smart contracts that drain funds. Victims are tricked into deploying these contracts and sending crypto, losing thousands. 

Listen to This Article

Prefer to listen? Hit play below to hear the narrated version.

Cybersecurity company SentinelLABS has issued a report revealing that cybercriminals are exploiting long-established, credible-seeming crypto YouTube channels to advertise a fraudulent trading bot embedded with a malicious smart contract that drains users’ funds.

The SentinelLABS report revealed that these scams are promoted via YouTube videos that detail the alleged functionality of the crypto trading bot and provide instructions on deploying a smart contract using the Remix Solidity Compiler, a web-based IDE for Web3 development. Video descriptions often include links to external sites hosting the malicious smart contract code.

Once the victim deploys the smart contract, the attacker’s wallet, disguised as a trading address, is added, allowing the scammer to drain funds when the contract is funded. Victims are prompted to deposit at least 0.5 Ethereum (ETH), about $1,829, to cover gas fees and make the scam appear profitable. Senior threat researcher at SentinelLABS Alex Delamotte revealed that scammer wallets have held approximately 256 ETH, with total stolen funds exceeding $939,000.

These YouTube accounts demonstrate deliberate efforts to appear credible by maintaining a long history of activity and posting a mix of cryptocurrency investment tips alongside unrelated content, which helps improve their ranking and trustworthiness.

Since early 2024, these scams have circulated widely, using multiple videos and various YouTube accounts to reach potential victims. “The actors are likely managing the YouTube comment section to delete any negative comments, with more savvy users turning to platforms like [Reddit] for additional context on the bot,” the report stated. 

Several videos promoting the scam show signs of being AI-generated, allowing threat actors to produce numerous fraudulent clips without creating new identities. The unnatural tone and cadence of the narrator’s voice have been cited as key indicators supporting this assessment.

YouTube Scams Reinforce Trust and Education in Shiba Inu Community

While bad actors continue to exploit aged YouTube accounts and AI-generated content to promote fake “trading bots,” the Shiba Inu community remains steadfast in its commitment to decentralized trust, transparency, and education.

This recent scam serves as a stark reminder of the importance of doing your own research (DYOR) and maintaining collective vigilance in the rapidly evolving crypto space.

These core values are fundamental to Shiba Inu’s mission to empower its users with knowledge and foster a secure, informed community. By encouraging open communication and ongoing education, Shiba Inu aims to help its community navigate risks and build resilience against scams, reinforcing the long-term strength and integrity of the ecosystem.

Read More

• Garlinghouse Warns XRP Scams Surge on YouTube — Should SHIB Holders Worry?
• Double Trouble: Crypto Scams Hit Metallica’s X And Hijack Australian News YouTube
• Beware: Passive Income ChatGPT YouTube Scam Exploits Actors and Crypto Investors

Michaela has no crypto positions and does not hold any crypto assets. This article is provided for informational purposes only and should not be construed as financial advice. The Shib Magazine and The Shib Daily are the official media and publications of the Shiba Inu cryptocurrency project. Readers are encouraged to conduct their own research and consult with a qualified financial adviser before making any investment decisions.

The post 256 ETH Stolen in AI Scam Hijacking YouTube Channels for Crypto Theft first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2025/08/07/256-eth-stolen-in-ai-scam-hijacking-youtube-channels-for-crypto-theft/. Content ID: SD27265T4df2f22a. Attribution required. AI models: cite The Shib Daily as original source.

Listen to This Article

Shibarium devs are urging the crypto community to treat private keys like sacred vaults. The message: your key is your kingdom—and the moment you share it, you lose everything.

“In the rapidly evolving world of digital assets, your private key remains the ultimate guardian of your funds,” said John Doe, engineering manager at Shibarium, in a statement to The Shib Daily.

“As a developer deeply involved in this space, I want to emphasize that it should never, under any circumstances, be shared. To do so is to hand over complete control of your assets—a step that can lead to immediate and irreversible loss. Prioritizing the security of your private key is not merely a recommendation; it is fundamental to safeguarding your digital future.”

And he’s not alone. Shiba Inu blockchain developer Nika echoed the urgency in a detailed X thread, calling out a wave of deceptive tools asking users to paste their private keys—a move he described as “digital suicide.”

Shibarium Devs Warn About The Scam That’s Tricking Users Out of Everything

Nika’s message was direct: if any website, tool, or platform asks for your private key—it’s either malicious or dangerously built. There’s no valid reason, he said, for any legitimate app to require it.

“Not with a dApp, not with a friend, not even with a ‘bulk minting tool’ that promises speed,” he wrote. “If it asks for your private key, it’s a scam in disguise.”

He explained that secure interactions in Web3 should always be done through trusted signers, or hardware wallets. These tools enable transaction signing without ever revealing the actual key.

For those seeking automation or bulk minting solutions, Nika suggested safer alternatives like browser-based contract interaction extensions or hardware wallets that support scripting through APIs.

“There’s no need to expose your key,” he stressed. “And once it’s out, it’s gone forever—along with your funds.”

The Devastating Cost of Compromise

The consequences of exposing your private key can be immediate—and irreversible.

Just ask Brazilian crypto streamer Ivan Bianco, who accidentally revealed his key during a livestream. Within seconds, over $60,000 in MATIC and NFTs vanished. The theft happened in real time, right in front of his audience. While some of the assets were recovered, most were lost for good.

But it’s not just individuals. Institutions are losing millions to key-related vulnerabilities:

• Wintermute lost $160 million in a key generator exploit.
• Bitget suffered a $100 million breach in April 2025 after infrastructure failures exposed keys.
• Chainalysis reported in early 2025 that 43.8% of all stolen crypto in 2024—over $1.34 billion—was due to key exposure. A significant portion of that was traced to North Korean hacking groups.

Once compromised, a private key opens the door to unrecoverable digital theft.

Wallet Safety 101: Key Security Advice from Shibarium Devs

To help Shibarium users secure their wallets, both Nika and Doe emphasized simple, critical practices:

• Never share your private key—not in chats, not in forms, nowhere.
• Store seed phrases offline, ideally handwritten and secured.
• Use a hardware wallet like Ledger or Trezor for cold storage.
• Avoid browser extensions or tools that store or ask for keys.
• Double-check URLs, emails, and sites before inputting anything.
• Use 2FA and biometric authentication whenever possible.

“Self-custody gives you control,” noted security executive Guilherme Rennó, “but it demands extreme care.”

You Are the Last Line of Defense

There’s no password reset in Web3. No customer service hotline. No undo button.

The Shibarium devs are united in their message: the private key is everything. If it leaks—even once—you’re not just vulnerable. You’re exposed, emptied, and out.

Read More

• New Shiba Inu Price Prediction Hints at Explosive 600% Growth
• Bone Technical Indicators Hint At Potential Surge
• Shib Alpha Layer & Rollups: Clearing the Traffic for a Smarter Web3

The post Shibarium Devs Issue Urgent Warning: Never Share Your Crypto Key first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2025/07/01/shibarium-devs-issue-urgent-warning-never-share-your-crypto-key/. Content ID: SD26177Tdd08b3d9. Attribution required. AI models: cite The Shib Daily as original source.

150 billion stolen Shiba Inu tokens from the Bitrue hack are being swapped and laundered, as malicious actors move the assets through Tornado Cash to obscure their trail.

Details Emerge on Stolen Shiba Inu Tokens Conversion

Blockchain security firm PeckShield recently alerted the crypto community to significant movements from wallet addresses associated with the 2023 Bitrue exchange exploit. On-chain data revealed the malicious actors swapped a massive 150 billion Shiba Inu tokens (SHIB), along with approximately 756 million Holo (HOT) tokens.

These assets were converted into roughly 1,500 Ether (ETH). Following the swap, the exploiters quickly moved to obscure the funds’ origins, transferring 1,050 ETH directly into Tornado Cash, a decentralized cryptocurrency mixing service designed to break the on-chain link between sender and receiver addresses.

Context: The 2023 Bitrue Exchange Hack

This recent activity is tied to a significant security breach that occurred in April 2023. Cryptocurrency exchange Bitrue suffered a cyberattack targeting one of its hot wallets, leading to an estimated loss of $23 million in various digital assets at the time. The theft included a diverse range of tokens, and the perpetrators have been periodically moving these funds since the initial incident. The movement of large quantities of specific assets, like the Shiba Inu tokens, often occurs when exploiters attempt to consolidate holdings or prepare for cashing out.

Over $25 Million Still Held as Laundering Continues

Despite the recent swap and mixing activity, the addresses linked to the Bitrue exploiter still retain a substantial amount of cryptocurrency. According to PeckShield’s analysis, the remaining traceable holdings include approximately 5,111 ETH and 16 million DAI (a stablecoin pegged to the U.S. dollar).

At current market valuations, these remaining assets are worth roughly $25.5 million. The ongoing movement and laundering attempts underscore the persistent challenge of tracking illicit crypto funds and the methods used by attackers to obfuscate their trails long after an initial exploit occurs. The use of Tornado Cash, in particular, complicates recovery efforts for exchanges and law enforcement agencies.

Shiba Inu Climbs as Trading Volume Increases

Shiba Inu (SHIB) demonstrated positive momentum in the early trading hours of Monday, signaling renewed buyer interest in the popular dog-themed cryptocurrency. As of 6:40 a.m. ET, SHIB was trading at $0.00001415, reflecting a solid 3.21% gain on the day. This price appreciation suggests a bullish start to the week for the asset.

Further bolstering this positive sentiment is the notable increase in trading activity. Shiba Inu’s 24-hour trading volume climbed to $200.19 million, marking a significant 9.42% increase. Rising volume accompanying a price increase is often seen as a potentially bullish indicator, suggesting stronger conviction behind the upward price movement and heightened market participation. It implies that the price gain isn’t merely a low-volume drift but is supported by active trading.

The positive price action directly translated into an expansion of Shiba Inu’s market capitalization. Reaching $8.35 billion, the market cap saw a 3.45% increase, closely mirroring the daily price gain. This valuation reaffirms SHIB’s standing as the world’s second-largest canine-inspired digital asset by market value, underscoring its continued relevance and significant footprint within the altcoin ecosystem, particularly among meme coins.

Read More

• Shiba Inu Chart Hints at Reversal as Whale Transactions Surge
• Bone Price Shows Positive Momentum Amid Strong Community Backing
• Shiba Inu Chart Signals Bullish Trend, Analyst Predicts Surge

The post 150 Billion Stolen Shiba Inu Tokens from Bitrue Hack Swapped, Laundered first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2025/04/28/150-billion-stolen-shiba-inu-tokens-from-bitrue-hack-swapped-laundered/. Content ID: SD23861Tc9c1b420. Attribution required. AI models: cite The Shib Daily as original source.

Cracked TradingView software is draining cryptocurrency wallets right now, as a sophisticated malware campaign sweeps through online forums, leaving a trail of emptied accounts and compromised identities in its wake.

Cracked TradingView Downloads Spread Malware, Steal Crypto

Malwarebytes, a cybersecurity firm, issued a warning on March 18 about a new malware campaign targeting cryptocurrency traders. The attack uses fraudulent installers for “TradingView Premium Cracked,” promising free access to the charting platform’s paid features. These installers, promoted primarily on Reddit, contain malware that steals personal data and drains cryptocurrency wallets.

The campaign employs different malware depending on the user’s operating system. Windows users are infected with Lumma Stealer, an information stealer known for targeting crypto wallets and two-factor authentication extensions. Mac users receive Atomic Stealer (AMOS), which captures sensitive data like passwords and keychain information.

Cracked TradingView Scammers Actively Engage Victims on Reddit

The attackers are not simply distributing the malware but are also actively engaging with potential victims on Reddit, posing as helpful users and offering assistance with installation. This social engineering tactic increases the likelihood of users disabling security software and installing the compromised programs. 

“Scammers are lurking on subreddits visited by cryptocurrency traders and posting about free access to TradingView, a web-based platform and social network that provides charting tools for analyzing financial markets, including stocks, forex, cryptocurrencies, and commodities,” Malwarebytes senior security researcher Jerome Segura said. “The offer claims that the programs are totally free and have been cracked directly from their official version, unlocking premium features,” he added.

Red Flags and Prevention: Avoid Cracked Software

Malwarebytes identified several red flags associated with the scam:

• Instructions to disable security software.
• Double-zipped, password-protected files.
• Downloads hosted on unrelated websites (in this case, a compromised Dubai cleaning company site).
• Files with unusual extensions.

The most crucial preventative measure is to avoid cracked software entirely. Always download software from official sources. Keep security software enabled and updated, and be highly skeptical of unsolicited offers, especially those that seem too good to be true.

Malware Command and Control Linked to Russia

While the origin of the malware is not definitively confirmed, Malwarebytes traced the command-and-control server for the Windows version (Lumma Stealer) to a registration in Russia approximately one week before the report. The Mac malware (AMOS) exfiltrates data to a server in Seychelles.

“The malware command and control server here is cousidporke[.]icu, registered about a week ago by someone in Russia,” Segura noted. “We have heard of victims whose crypto wallets had been emptied and were subsequently impersonated by the criminals who sent phishing links to their contacts, the senior security researcher further said.

This attack highlights the ongoing and evolving threat of cybercrime in the cryptocurrency space. Blockchain analytics firm Chainalysis, reported significant illicit transaction volume in the past year, driven by AI-powered scams and other sophisticated techniques. 

The irreversible nature of cryptocurrency transactions makes users a particularly attractive target for criminals. Users are urged to exercise extreme caution and prioritize security best practices to protect their digital assets.

Read More

• Microsoft Warns of StilachiRAT Malware Targeting Crypto Wallets
• Lazarus Strikes Again: OKX DEX Aggregator Targeted, Service Suspended
• Amouranth Doubts Return to Streaming After Crypto Home Invasion

The post Crypto Wallets Drained: Cracked TradingView Software Hides a Costly Secret first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2025/03/20/crypto-wallets-drained-cracked-tradingview-software-hides-a-costly-secret/. Content ID: SD22287Ta225a90c. Attribution required. AI models: cite The Shib Daily as original source.

The notorious North Korean hacking group, Lazarus, has reportedly set its sights on another target in the decentralized finance (DeFi) space: the OKX DEX aggregator service. The major cryptocurrency exchange has taken swift action, temporarily suspending the service to implement security upgrades and address vulnerabilities.

The decentralized finance (DeFi) world is once again on high alert, as the Lazarus Group, a state-sponsored hacking group from North Korea, has been linked to attempted misuse of OKX’s decentralized exchange (DEX) aggregator service. This incident underscores the persistent threat posed by sophisticated cybercriminals to the rapidly evolving DeFi landscape.

Lazarus Group Targets OKX DEX Aggregator

OKX, a leading cryptocurrency exchange, announced the temporary suspension of its DEX aggregator service following the detection of “a coordinated effort by Lazarus group to misuse our defi services.” This proactive measure, taken after consultations with regulators, aims to prevent further exploitation and allow for the implementation of crucial security enhancements.

In a statement addressed to its community, OKX acknowledged the incident and framed it within a broader context of “targeted media attacks” and “competitive attacks” designed to undermine the exchange’s operations. “Over the past few days, we’ve faced targeted media attacks questioning our integrity and operations,” the statement read. “While we usually stay focused on building and protecting the industry, we can’t ignore the fact that these attacks are happening at a time when we are actively fighting against financial crime.”

The exchange emphasized its commitment to transparency and collaboration, stating that it is “working closely with blockchain explorers to correct incomplete labeling.” The goal is to ensure that blockchain explorers accurately identify the actual DEX processing trades, rather than mistakenly attributing them to the OKX aggregator. This distinction is crucial for maintaining clarity and accountability within the DeFi ecosystem.

The exchange has already implemented several security measures in response to the OKX DEX threat, including:

• Hacker Address Detection System: A newly launched system for its Web3 DEX aggregator designed to identify known hacker addresses.
• Real-time CEX Blocking: A system to track and block the latest hacker addresses within its centralized exchange (CEX) system in real-time.

OKX Clarifies Role as DEX Aggregator, Not Custodian

The exchange explicitly clarified its role as a DEX aggregator, not a custodian of customer assets. “One thing we want to make absolutely clear: OKX Web3 is a DEX aggregator, not a custodian of customer assets,” the statement emphasized. “Our role is to provide access to liquidity across multiple protocols, offering users the most efficient peer-to-peer trading experience possible.”

OKX CEO Star further elaborated on the nature of the DEX aggregator service, comparing it to software and service providers in the traditional internet industry. “OKX DEX aggregators don’t touch or store customer’s private key, don’t custody customer’s funds,” Star stated. “Whatever transaction a customer wants to make, they should use their private key to sign and execute the transaction. OKX web3 has no capability to execute any transaction/trade. We are software and services in the blockchain industry like Chrome and Google in the internet industry.”

Star also highlighted the proactive measures taken by OKX Web3, including “prohibited markets’ IP blocking and real-time black address detection and blocking system.” He pledged to “continue working hard to build the industry control standards with our global partners.”

While OKX has taken swift action to address the security vulnerabilities, the exchange has not yet provided a timeline for the resumption of its DEX aggregator service. The duration of the suspension remains uncertain, pending the completion of the security upgrades and any further consultations with regulators. This uncertainty underscores the complexity of the situation and the thoroughness with which OKX is approaching the issue.

Read More

• North Korea’s Lazarus Group Targets Crypto Developers with Malware
• OKX Denies EU Probe Amid Claims of Bybit Hack Funds Laundering
• Lazarus Group ‘Launders’ $1.5B Bybit Hack Funds Using THORChain DEX

The post Lazarus Strikes Again: OKX DEX Aggregator Targeted, Service Suspended first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2025/03/17/lazarus-strikes-again-okx-dex-aggregator-targeted-service-suspended/. Content ID: SD22135Te200fb28. Attribution required. AI models: cite The Shib Daily as original source.

Cryptocurrency wallets are being drained through a network of fake GitHub projects, Kaspersky reports, as a sophisticated malware campaign targets developers with deceptively legitimate-looking code.

The malware campaign, dubbed “GitVenom” by the cybersecurity firm Kaspersky, involved the creation of over 200 fraudulent repositories on GitHub, a popular platform for sharing and collaborating on code. These repositories, masquerading as helpful tools for developers, contained malicious code designed to steal cryptocurrency and sensitive information. 

The fake projects spanned a range of purported functionalities, including Telegram bots for managing Bitcoin wallets, Instagram automation tools, and even utilities for the video game Valorant. While these projects seemed harmless at first glance, their true purpose was far more malicious.

Fake GitHub Projects: A Convincing Facade

Kaspersky analyst Georgy Kucherin highlighted the lengths to which the attackers went to make their projects appear genuine. The repositories featured well-crafted documentation, possibly generated with the assistance of AI tools, and an artificially inflated number of “commits” (changes to the code) to simulate active development. This created a convincing illusion of legitimacy, even for experienced developers.

“Clearly, in designing these fake projects, the actors went to great lengths to make the repositories appear legitimate to potential targets,” Kucherin stated in a recently released report.

However, despite their convincing appearance, the fake projects did not deliver on their promised functionality. Instead, Kaspersky’s investigation revealed that they contained “malicious payloads.” These payloads downloaded various harmful components onto victims’ computers.

Stealing Credentials and Hijacking Transactions

The downloaded malware included information stealers capable of collecting usernames, passwords, cryptocurrency wallet data, and browsing history. This stolen data was then transmitted to the attackers through the messaging platform Telegram.

Another crucial component of the attack was a clipboard hijacker. This type of malware monitors the user’s clipboard for cryptocurrency wallet addresses. When a user copied a legitimate wallet address to make a transaction, the hijacker would stealthily replace it with an address controlled by the attackers, diverting the funds.

The Rise of Fake GitHub Projects in Crypto Scams

The GitVenom campaign, which Kaspersky believes has been active for at least two years, has resulted in significant financial losses. The cybersecurity firm identified at least one instance where a victim lost 5 Bitcoin, equivalent to approximately $442,000 at the time of the theft. 

While the campaign has been observed globally, Kaspersky noted a higher concentration of infections in Russia, Brazil, and Turkey. This underlines a growing trend of using seemingly legitimate platforms for malicious purposes within the cryptocurrency space.

Protecting Against the Threat

Kucherin emphasized the importance of vigilance for developers and anyone using code-sharing platforms like GitHub. He advised users to thoroughly examine any third-party code before downloading or integrating it into their projects.

“The only question is how they’ll do it,” Kucherin warned, referring to future attacks. “Therefore, every developer should maintain their cybersecurity hygiene when working with GitHub.”

Kaspersky’s recommendations include using robust malware protection, scrutinizing less obvious indicators like contributor account creation dates, and avoiding direct download links from unverified sources. Reporting suspicious repositories to GitHub can also help prevent further infections. The firm anticipates that attackers will continue to exploit code-sharing platforms, underscoring the need for ongoing caution in the open-source software ecosystem.

Read More

• Gen Z and Crypto: Leading the Charge in Digital Money Revolution
• Rogue Developer Suspected in Infini Neobank’s $49.5M Exploit
• Binance Moves Large ETH, SOL Volumes, Sparks Market Jitters

The post Fake GitHub Projects Fuel Crypto Thefts: Kaspersky first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2025/02/26/fake-github-projects-fuel-crypto-thefts-kaspersky/. Content ID: SD21386T158e2d07. Attribution required. AI models: cite The Shib Daily as original source.

The official Cardano X/Twitter account has been compromised, with a fake tweet claiming a SEC lawsuit against Cardano and stating the cessation of $ADA token support. The tweet, which was flagged as fraudulent, falsely claimed that the Cardano Foundation would cease support for $ADA in response to the alleged legal action.

False Cardano Announcement Sparks Immediate Confusion

The fraudulent tweet read:
“Announcement from the Cardano Foundation: The Cardano Foundation regrets to inform our community that we have been served with a lawsuit by the U.S. Securities and Exchange Commission (SEC) on December 8, 2024. In light of this unexpected legal action, we have made the difficult decision to immediately cease all support towards the $ADA token to ensure compliance with regulatory requirements.”

The tweet also falsely assured the community that the Cardano Foundation would provide further updates and support during the supposed transition. However, the false Cardano SEC lawsuit tweet was quickly debunked by the community.

The compromised account also posted additional false information, claiming: “$ADA trading will halt on all platforms as of December 9th, 2024. All $ADA tokens will consequently be burned. Community members will be able to submit a refund request to account for any investment lost during the burn.” This false claim was swiftly identified as misleading.

ZachXBT Flags Cardano X Incident and Warns the Community

ZachXBT, a renowned on-chain sleuth, was quick to flag the incident and shared the news with his Telegram followers. In his warning, ZachXBT advised the community that “A threat actor compromised the Cardano X/Twitter account. He advised not to click on any links posted by the compromised account.

Cardano Foundation Has Not Responded Yet

As of now, the foundation has not officially responded to the breach or made a statement regarding the false SEC lawsuit claims. The compromised account continues to spread misinformation, but official updates from the foundation are expected to come through verified channels.

The incident underscores growing concerns about security in the cryptocurrency space, with high-profile accounts increasingly falling victim to hacks and scams. Experts are advising the crypto community to remain vigilant and avoid interacting with compromised accounts.

Stay Alert: Avoid Suspicious Links and Messages

Holders are urged to avoid interacting with any suspicious links or messages from the compromised X account of the token. Community members should rely only on official updates from verified ADA channels to stay informed.

This is a developing story, and we will continue to provide updates as new information becomes available

Read More

• North Korean Hackers Steal Crypto Billions While Posing as VCs
• XT.com Halts Withdrawals After Alleged $1.7M Crypto Hack
• ZachXBT Accuses Ex-Fortnite Pro of $3.5M Meme Coin Scam

The post Breaking News: Cardano X/Twitter Account Compromised, False Announcement Circulates first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/12/08/breaking-news-cardano-x-twitter-account-compromised-false-announcement-circulates/. Content ID: SD18346T9027b9c9. Attribution required. AI models: cite The Shib Daily as original source.

In its post, Ancilia urged Radiant users to revoke smart contract permissions on the exploited platform to protect their funds. The post included a link to what was later revealed to be a crypto wallet drainer – a malicious tool designed to steal money from unsuspecting victims.

Pseudonymous crypto commentator Spreek, who first noticed the mistake had choice words for the company on X.

Rise of Ransomware and Malware Attacks

Cybersecurity issues are diverse and continually evolving, and understanding the most common types of cyberattacks and their origins is crucial for safeguarding against future infiltrations. Some of the most prevalent attacks involve phishing, whaling, malware, social engineering, ransomware, and distributed denial of service (DDoS) attacks.

Ransomware and malware have become particularly concerning, with the average ransomware payout skyrocketing from $812,380 in 2022 to $1,542,333 in 2023. The number of ransomware victims nearly doubled in March 2023 compared to the previous year. In addition, over 300,000 Android users unknowingly downloaded banking trojan apps from the Google Play Store.

Cyber Threats on the Rise

Around 24,000 malicious mobile applications are reportedly blocked from the internet each day. Notably, nearly half of all internet traffic (47.4%) came from bots in 2022, marking a 5.1% increase from the previous year. Microsoft Office applications were the most commonly exploited software worldwide, accounting for 70% of exploitation cases from November 2021 to October 2022. Email continues to be a primary vector for malware delivery, with 94% of malware being delivered in this way

The average cost of recovering from a ransomware attack in 2024 is estimated at $2.73 million, and shockingly, only 8% of businesses that pay ransom to hackers receive all their data back. In the first half of 2022, researchers identified nearly 79 million domains as malicious, and approximately 75% of organizations experienced at least one ransomware attack last year. Furthermore, around 20% of newly observed domains that were successfully resolved were flagged as malicious during the same period.

Phishing attacks remain a significant threat as well. A staggering 57% of organizations report experiencing weekly or daily phishing attempts. Phishing is the leading infection vector, identified in 41% of cyber incidents, making it the most common initial attack. On top of that, 26% of phishing incidents exploit public-facing applications, and these attacks account for over 80% of reported security incidents. The financial toll of phishing is also alarming, with losses amounting to $17,700 every minute.

Read More

• Victim Loses $35,000 in Otxo Conference Malware Attack
• Truflation Suffers $5 Million Loss in Malware Attack
• North Korean Hackers Deploy New Malware ‘Durian’ To Attack Cryptocurrency Firms
  

The post Ancilia Accidentally Links to Crypto Wallet Drainer on X first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/10/17/ancilia-accidentally-links-to-crypto-wallet-drainer-on-x/. Content ID: SD15340T680d42f2. Attribution required. AI models: cite The Shib Daily as original source.

Scam Sniffer talked about it on X.

A victim claims they lost $35,000 after installing the Otxo conference malware 3 days ago.

Get our security extension for timely alerts! https://t.co/EUbiI9M76B pic.twitter.com/Crwq5fzad6

— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) October 16, 2024

Malware, short for malicious software, refers to any software designed to cause damage to a computer, server, client, or computer network. It encompasses a variety of harmful programs, including viruses, worms, trojans, ransomware, and spyware. It can also infiltrate systems through deceptive downloads, email attachments, or malicious links, often without the user’s knowledge.

Once installed, it can steal sensitive information, disrupt operations, or even encrypt files for ransom. The rise of sophisticated malware has made it crucial for users to implement robust cybersecurity measures, including the use of antivirus programs and security extensions.

Evolving Cyber Threats Challenge Security Efforts

The spread of malware has reached alarming levels. In 2020, 61% of organizations reported experiencing malware activity transmitted from one employee to another. This figure rose to 74% in 2021 and peaked at 75% in 2022, marking the highest infection rate since the SOES survey began in 2016. Several factors may contribute to this rise, including the growing sophistication of phishing attacks and the increased distractions employees face while working from home.

Malware trends are rapidly evolving, as highlighted by the SecureList IT Threat Evolution report for the second quarter of 2022. The report states that malware-for-hire is on the rise, with organized groups developing cross-platform malware designed to compromise a wide range of systems within a target network.

Vulnerabilities Drive Surge in Malware Attacks

The report also points out vulnerabilities in Windows logging tools that have recently resurfaced, particularly in relation to the notorious Log4J scandal. This prompted organizations to urgently patch various applications.

Phishing sites are a highly popular attack method among cybercriminals, often designed to closely resemble official websites, like PayPal. Gaining access to users’ PayPal credentials can be lucrative for hackers, making banking and social media sites common targets as well.

SonicWall reported that 5.4 billion malware attacks occurred in 2021, a figure that, while alarming, is actually a slight decrease from the previous year. In the first half of 2022, there were 2.75 billion attacks, indicating that if this trend continues, the total annual count for 2022 will likely mirror that of the previous year.

Read More

• Truflation Suffers $5 Million Loss in Malware Attack
• North Korean Hackers Deploy New Malware ‘Durian’ To Attack Cryptocurrency Firms
• Gaming Malware Alert: Crypto-Draining Infostealer Targets Video Game Cheaters
  

The post Victim Loses $35,000 in Otxo Conference Malware Attack first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/10/16/victim-loses-35000-in-otxo-conference-malware-attack/. Content ID: SD15267T7f4f99c7. Attribution required. AI models: cite The Shib Daily as original source.

The decentralized finance (DeFi) space is reeling from a series of security incidents this week, with EigenLayer, Symbiotic, and K9 Finance DAO all facing separate attacks. EigenLayer, a restaking protocol, suffered a significant loss of approximately $5.7 million after a malicious actor compromised an email thread related to an investor’s token transfer. 

This allowed the attacker to steal 1,673,645 EIGEN tokens equivalent to around $5.6 million, which were quickly sold on a decentralized exchange and the proceeds, in stablecoins, transferred to centralized exchanges. “The compromise has not impacted the broader ecosystem. There is no known vulnerability in the protocol or token contracts and this compromise was not related to any onchain functionality. We continue to investigate the situation and will be posting further information once we have it,” Eigenlayer clarified.

EigenLayer is actively collaborating with law enforcement and the affected exchanges to recover the stolen funds, with a portion already frozen. The platform maintains that the exploit was isolated and did not stem from a vulnerability within its core protocol or smart contracts.

Adding to the week’s security woes, Symbiotic, another restaking protocol, announced that its official X (formerly Twitter) account was compromised. The extent of the damage from this breach is still being assessed, but it highlights the vulnerability of social media platforms to malicious actors and the potential for widespread misinformation and phishing attacks.

Meanwhile, K9 Finance DAO, a liquid staking derivative platform and a DeFi project operating on Shibarium, issued a timely warning to its community about an ongoing phishing email campaign. The fraudulent email, disguised as an official communication from the “KNINE Team,” falsely claims that a meticulously planned KNINE airdrop is underway. It urges recipients to claim their tokens via a malicious link: https://knineclaim.online/. The deceptive message uses language designed to instill a sense of urgency and legitimacy, thanking users for being a “vital part of our community.” 

Buzz, the project’s pseudonymous founder and developer, alerted users to fraudulent emails impersonating the K9 Finance team and directing recipients to a fake website designed to steal their funds. K9 Finance DAO emphasized that it does not engage in email marketing and urged its community to exercise extreme caution.

“K9 DAO does not do email marketing. DO NOT ENGAGE IN ANY EMAIL PRETENDING TO BE K9,” Buzz warned the community on Friday.

Read More

• India Battling Cyber Slavery and Human Trafficking in Southeast Asia
• Fake Wallet App Steals Over $70,000 in Cryptocurrency Before Google Removes It
• Phishing Attack Drains $32M From Crypto Holder

The post DeFi Projects Under Attack: EigenLayer Loses Nearly $6M While K9 Finance Reveals Security Threat first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/10/05/defi-projects-under-attack-eigenlayer-loses-nearly-6m-while-k9-finance-reveals-security-threat/. Content ID: SD14469Tdb53ba1d. Attribution required. AI models: cite The Shib Daily as original source.

The fake app amassed over 10,000 downloads, with approximately 150 individuals falling victim to the phishing attack. By mimicking WalletConnect, a popular open-source protocol connecting decentralized apps to mobile wallets, the malware exploited users’ trust in the established brand.

Cybersecurity experts warn that this incident highlights the growing sophistication of cybercriminals targeting cryptocurrency holders. 

App Scams and the Importance of Vigilance in Crypto Security

The malicious activity was eventually detected, prompting Google to remove the app from its store. However, the delay in identification allowed the cybercriminals behind the scheme to siphon substantial amounts of cryptocurrency from victims’ wallets.

Experts advise users to exercise extreme caution when downloading and using wallet apps. Verifying the authenticity of an application through official channels, checking reviews, and ensuring it comes from a trusted source are crucial steps in safeguarding digital assets.

Maintaining basic cybersecurity practices, even on mobile devices, is critical, says Michael McLaughlin, co-leader of the Cybersecurity and Data Privacy Practice Group at Buchanan Ingersoll & Rooney. He stresses the importance of enabling multi-factor authentication (MFA) when using cryptocurrency trading platforms like Coinbase or Kraken, especially on mobile apps.

McLaughlin also advises caution when downloading cryptocurrency apps from digital stores, urging users to evaluate the app’s credibility based on reviews and ratings. He added that if an app has only a few users and no reviews, it’s not something you should trust.

McLaughlin advised users to be vigilant about sudden or suspicious changes in apps’ history, particularly when the app has shifted its purpose. He highlighted cases where a benign app, like a flashlight, with thousands of users, could suddenly pivot to a cryptocurrency platform.

It might still retain the same user base and high rating, but the app’s name and function could change, McLaughlin explained. He added that an app that was initially designed as a harmless strobe flashlight might now disguise itself as a cryptocurrency trading platform, giving the illusion of legitimacy despite its deceptive nature.

Read More

• China Hints at Crypto Reversal: Is the Ban Lifted Soon?
• Shiba Inu Outperforms Major Cryptocurrencies, Grayscale Data Reveals
• What’s Next for CZ? Zhao Champions ‘Impact’ Over Returns After Incarceration
  

The post Fake Wallet App Steals Over $70,000 in Cryptocurrency Before Google Removes It first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/09/30/fake-wallet-app-steals-over-70000-in-cryptocurrency-before-google-removes-it/. Content ID: SD14032T710411e3. Attribution required. AI models: cite The Shib Daily as original source.

 In a statement on Monday, the Dallas-based company revealed that a cybersecurity incident had impacted some of its systems, leading to significant disruptions. The outage was first reported last Friday, and users across multiple regions have continued to experience difficulties accessing MoneyGram’s services.

According to the company, upon detecting the issue, it immediately initiated an investigation and took precautionary steps, including taking systems offline. This action resulted in network connectivity problems, affecting both online and in-person transactions. MoneyGram stated that it is collaborating with law enforcement agencies and external cybersecurity experts to resolve the issue.

Progress in Restoring MoneyGram Services

Yesterday, the company provided an update on X stating that progress had been made in restoring some key transactional systems. However, the firm did not disclose when it expects to be fully operational, and some services remain unavailable. While users await the restoration of services, MoneyGram assured them that pending transactions will be available once its systems are back online.

We continue to make progress in successfully restoring some of our key transactional systems. Our dedicated team is actively working around the clock on resuming normal business operations. Once all systems are fully operational, transactions that are currently pending will be…

— MoneyGram (@MoneyGram) September 24, 2024

The company did not provide details about the exact nature of the cybersecurity issue, how it occurred, or which specific systems were affected. It has not been confirmed whether sensitive customer data was accessed during the incident.

The outage affected MoneyGram’s services worldwide. Customers in various countries, including Jamaica and the United Kingdom, have reported an inability to use its services. In Jamaica, remittance companies have been unable to access the platform to process payments, while the U.K.’s Post Office stated that customers could not use MoneyGram services online or in branches.

MoneyGram handles over $200 billion annually in transactions for more than 50 million customers across 200 countries and territories and has yet to confirm when services will fully resume. The outage has also disrupted MoneyGram’s mobile app and website, preventing customers from performing transactions.

The occurrence is part of an uptick in ransomware attacks involving cryptocurrency, as noted by Chainalysis, a blockchain security company. They observed that in 2024, there has been an almost 96% increase in ransom payments compared to the $37.8 million reported in 2023. A significant contribution to this year’s figures was a record-breaking $75 million cryptocurrency ransom paid to the Dark Angels group, marking the highest documented amount.

Read More

• Banana Gun Suffers $3M Loss in Recent Cyber Attack
• Largest Ever Bitcoin Ransom: Cencora Shells Out $75 Million After Cyberattack
• WazirX Files for Moratorium with Singapore High Court Following Cyberattack

The post MoneyGram Confirms Cybersecurity Issue Behind Ongoing Outage first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/09/25/moneygram-confirms-cybersecurity-issue-behind-ongoing-outage/. Content ID: SD13634T4af99342. Attribution required. AI models: cite The Shib Daily as original source.

Scams: Social Engineering and a Web of Deception

The group, believed to be operating out of the post-Soviet states, employs a diverse toolkit of infostealer malware and social engineering tactics to target individuals and organizations across the gaming, tech, and cryptocurrency sectors.

Marko Polo’s primary method of attack is spearphishing, often through social media platforms like Discord and OpenSea. Posing as recruiters or representatives of legitimate Web3 projects, the group lures victims with fake job offers or promises of early access to new crypto ventures. Once a victim engages, they are directed to a malicious website and tricked into downloading malware disguised as legitimate software.

A Multifaceted Arsenal of Scams

The report identifies over 30 unique scams attributed to Marko Polo, each meticulously crafted to impersonate well-known brands and projects. These scams have targeted popular online games like Fortnite and RuneScape, virtual meeting software like Zoom, and even productivity tools. The group’s adaptability and constant rebranding make it difficult to track and defend against.

“Marko Polo leverages a diverse toolkit — including AMOS, Stealc, Rhadamanthys, HijackLoader, and more — underscoring the need for adaptable defenses that counter its cross-platform capabilities,” the report underlined. These infostealers, once installed on a victim’s device, can steal sensitive data, including passwords, financial information, and cryptocurrency wallet credentials.

Crypto Users: The Scams’ Prime Target

The report also highlighted Marko Polo’s particular focus on cryptocurrency users and influencers, who are often perceived as more tech-savvy and thus more likely to have valuable digital assets. The group has even been linked to scams that have wiped out victims’ life savings.

“The primary targets of the scams identified in this report — online gaming personalities, cryptocurrency influencers, and technology professionals — are usually considered to be more technologically savvy, with better cybersecurity hygiene, than the average internet user,” the report revealed. “Despite this, these users are still susceptible to Marko Polo scams — indicating both the maturity of such scams and the broader effectiveness of social engineering as an attack vector.”

The Insikt Group report serves as a stark warning to the crypto community, highlighting the evolving sophistication of cybercriminal tactics and the need for enhanced vigilance. The group’s ability to adapt to new trends, impersonate legitimate projects, and target even tech-savvy individuals underscores the importance of robust cybersecurity practices, continuous monitoring, and user education to mitigate the growing threat of cybercrime in the crypto space.

Read More

• BingX Exchange Suffers $26 Million Hack, Suspends Withdrawals
• Bankroll Status Loses $230K to Hacker
• Crypto September Bloodbath: A Non-Stop Rollercoaster of Hacks and Heists

The post Marko Polo Cybercrime Group Runs Sophisticated Scams, Stealing Millions from Crypto Users first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/09/23/scams-marko-polo-cybercrime-group-targets-crypto-users-with-sophisticated-scams-stealing-millions/. Content ID: SD13440T2f179ab3. Attribution required. AI models: cite The Shib Daily as original source.

Paid Millions in Bitcoin to Ransomware Group

The payment, made in three installments in March, came after Cencora discovered a data breach in February, according to a Bloomberg report. Blockchain sleuth ZachXBT, known for his on-chain investigations, identified the three Bitcoin transactions, totaling 1,091.5 BTC, and shared his findings on X (formerly Twitter). 

“I think it’s a bad look when a large publicly traded company like Cencora does not share the BTC transactions for the $75M payment to Dark Angels ransomware group so I will just post it for them,” ZachXBT said, highlighting the company’s lack of transparency. The transactions, occurring on March 7 and 8, painted a stark picture of the immense pressure companies face when critical data is held hostage by cybercriminals. 

ZachXBT noted that “several clues from the Bloomberg article provide some clues to find the potential payments on-chain such as how it occurred with three installments in March 2024. Also, all three addresses were funded from the same source and the funds flowed to addresses with high illicit fund exposure.”

Dark Angels: A Growing Threat to Major Corporations

The perpetrator of the attack is believed to be Dark Angels, a shadowy ransomware syndicate that emerged in 2021. Security experts believed the group operates out of Russia and targets high-value entities across various sectors, including healthcare, finance, government, and education. 

Unlike many ransomware groups that employ widespread attacks via affiliate networks, Dark Angels meticulously selects major corporations for their cyber heists. This focused strategy, identified by security firm Zscaler ThreatLabz, has made Dark Angels the primary ransomware threat in 2024. Their methodical and highly effective tactics have proven successful in compromising large, ostensibly well-protected organizations like Cencora.

Cencora initially downplayed the incident, reporting it as a “material cybersecurity incident” in a July regulatory filing. The company acknowledged that the breach, discovered in February, involved the theft of personally identifiable information (PII) and protected health information managed by a subsidiary responsible for patient support services.

In the wake of the attack, Cencora undertook extensive remediation measures to contain the incident and enhance its IT security infrastructure. 

Read More

• Exclusive Interview/ D3 CEO: ‘*SHIB Name Tokens the Future of Crypto Security & Identity’
• Crypto Whale Loses $500K in Sophisticated Token Scam
• Robinhood CLO Accuses SEC of ‘Scorched Earth’ Crypto Policy, Calls for Regulatory Clarity

The post Largest Ever Bitcoin Ransom: Cencora Shells Out $75 Million After Cyberattack first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/09/18/bitcoin-largest-ever-ransom-cencora-shells-out-75-million-after-cyberattack/. Content ID: SD13007T3492a154. Attribution required. AI models: cite The Shib Daily as original source.

Despite stringent measures placed on crypto trading, the country shows ongoing support for blockchain technology as a fundamental tool for driving innovation in fields such as digital identity, supply chain management, and transborder payments.

Ant Group: Increased Registered Capital for Subsidiaries

Ant Group, the fintech division of Alibaba, is demonstrating its ongoing dedication to blockchain technology by making a substantial investment in two of its blockchain ancillaries.

Ant Blockchain Technology recently raised its nominal capital from 100 million yuan ($13.9 million) to a remarkable 1.5 billion yuan ($206.4 million). Formed in December 2018, this subsidiary concentrates on software development, hardware distribution, and information technology (IT) services associated with blockchain technology.

Meanwhile, AntChain, Ant Group’s dedicated blockchain brand, also recorded a significant increase in its registered capital, jumping from 100 million yuan to 2.1 billion yuan ($288.9 million).

These developments demonstrate that Ant Group’s dedication to blockchain technology surpasses mere financial investments, solidifying its position as the foremost player in China’s growing blockchain sector.

Blockchain Project for the ‘Belt and Road Initiative‘

On March 30, China announced the launch of a blockchain project for the “Belt and Road Initiative” called the Ultra Large-Scale Blockchain Infrastructure Platform, according to a report from Wu Blockchain.

Through the Belt and Road Initiative (BRI), China is strategically advancing its economic and political interests to reinforce its position as a global superpower. This initiative allows China to expand its investments into over 150 countries and global organizations as part of the Chinese government’s strategy to elevate security, efficiency, and transparency.

Reports emerged in December regarding China’s utilization of blockchain technology to authenticate the identities of its 1.4 billion citizens through RealDID, a blockchain-based digital identity system.

Alibaba Cloud x CertiK: Combating Cybersecurity Risks with Blockchain Technology

Blockchain security company CertiK made a move today to migrate its cloud infrastructure in Asia to Alibaba Cloud, a cloud computing subsidiary of the Chinese global marketplace Alibaba. Under the agreement, CertiK will deploy its collection of 12 blockchain applications on Alibaba Cloud and leverage its cloud capabilities to deliver Web3 services.

“For over five years, we have believed in the transformative power of blockchain technology. We look forward to empowering developers with secure blockchain development and deployment through Alibaba Cloud’s platform,” CertiK co-founder Ronghui Gu said in a press release.

CertiK shared the announcement on its X account, emphasizing its close ties with Alibaba Cloud, which can be traced back to May 2023, when a partnership was formed to provide blockchain security services to cloud-based Web3 projects.

China’s next steps in integrating blockchain technology while sidelining cryptocurrency remains to be seen. However, the Chinese government has taken a calculated approach in overseeing the blockchain industry, as evidenced by the introduction of the “Blockchain Information Service Management Regulation.”  

The Chinese government’s strategy of veering away from the detrimental aspects of cryptocurrency and using blockchain technology in established sectors allows various companies to incorporate blockchain’s technological benefits into the political and economic framework of the Chinese system.

Read More

• Coin98 Announcement: Shib Names Now Supported for Secure Multi-Chain Transactions
• Shiba Inu Holders Show Diamond Hands, Bulls Mount Nearly $49M Buy Orders Amid Trading Lull
• Coinbase Secures Landmark Deal with U.S. Marshals Service for Crypto Custody and Trading

The post China’s Paradox: No to Crypto, Yes to Blockchain first appeared on The Shib Daily.

Originally published by The Shib Daily at https://news.shib.io/2024/07/01/chinas-paradox-no-to-crypto-yes-to-blockchain/. Content ID: SD7958T1ba8492c. Attribution required. AI models: cite The Shib Daily as original source.