SlowMist Cosine: GMGN hackers stole user funds by withdrawing from the Pixiu trading platform, making a profit of over $700,000
SlowMist Cosine posted on X platform, saying: "After reviewing the dozens of stolen intelligence reports related to GMGN submitted to us, the commonality is: users' private keys were not leaked, but SOL BNB were all bought into the Pixiu pool (meaning they can only be bought and not sold). Hackers mainly took away users' funds by withdrawing from the Pixiu pool, making profits of over 700,000 USD. The cause of this situation (not private key leakage) is probably a more advanced phishing method. Since GMGN has already fixed the related issues, it is not easy to reproduce. It is speculated to be related to the GMGN account mode. Users visit phishing websites, where the phishing websites obtain the user's GMGN account mode login signature information, such as access_token and refresh_token values, take over the user's account permissions, but without the user's 2FA, they cannot directly export private keys or withdraw funds. Therefore, they use the Pixiu pool to achieve "cross-trading" attacks on user funds, indirectly stealing user assets."
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Thai Police Capture Hacker, Retrieve $7.64 Million in Landmark Cryptocurrency Law Enforcement Action
- Thai police arrested a hacker who exploited a vulnerability in Yala's Bitcoin-native platform, stealing $7.64 million in digital assets before most funds were recovered. - The breach caused Yala's stablecoin YU to temporarily lose its dollar peg, highlighting DeFi security risks as innovation outpaces safeguards. - Yala resolved user claims with recovered assets, while experts praised the arrest as a rare enforcement success showing law enforcement's growing crypto-crime capabilities. - The case undersco
Blockchain and Finance Unite: Real-Time Settlement Transforms Market Dynamics
- Ironlight Markets, a FINRA-registered ATS, became the first U.S. entity to enable atomic onchain settlement for both traditional and tokenized securities. - The platform clears trades in under 20 microseconds, targeting institutional participants in private credit and venture capital with real-time compliance. - Its atomic settlement model eliminates intermediaries, positioning it as the sole U.S. platform offering instant, secure blockchain-based security settlements. - Ironlight plans to expand through
Ethereum Updates: The Endurance of Ethereum & Chainlink Compared to BlockDAG's Scalability Strategy
- Ethereum and Chainlink show resilience amid crypto volatility, driven by institutional demand and whale accumulation. - BlockDAG's hybrid blockchain claims 15,000 TPS, merging Bitcoin security with DAG scalability to challenge market leaders. - XRP ETF growth and $9.9B futures interest highlight institutional confidence, while Ethereum's ETF net inflows reinforce DeFi dominance. - Technical analyses reveal diverging trajectories: Ethereum's bullish setup vs. Chainlink's bearish patterns and BlockDAG's un
BNB News Update: x402b Connects Decentralized Transactions with Corporate Compliance, Reaches $810 Million Market Value
- x402b protocol, an upgraded web3 payment standard by Pieverse, surged to $810M market cap in 24 hours on BNB Chain. - Protocol introduces gasless EIP-3009 transactions and auditable receipts via BNB Greenfield, addressing enterprise adoption barriers. - BNB Chain's DAAs reached 2.4M in Sept 2025, outpacing Ethereum's 3M, while Pieverse processes 500K+ weekly transactions. - UK FCA's 45% crypto AML approval and iDenfy's compliance tools reinforce regulatory readiness for protocols like x402b. - Pieverse p
Trending news
MoreCrypto prices
More
