最新 駭客 新聞與觀點 | Yellow.com

Hackers slipped wallet-stealing malware into an official Injective (INJ) developer package that averages 50,000 weekly downloads, and the tainted release was fetched 310 times before a rapid cleanup. Key Points: A tainted version of Injective's main TypeScript kit copied wallet seed phrases and priv

Crypto hackers carried out 207 separate breaches in the first half of 2026, the highest six-month total ever recorded, stealing $972 million as incidents more than doubled. Key Points Crypto hacks hit a record 207 incidents in the first half of 2026, though total losses fell to $972 million, less th

FBI and CISA warn that Russian hackers are phishing Signal users for backup recovery keys that can unlock message archives. Key Points: Russian intelligence-linked hackers are seeking Signal backup recovery keys, not only codes or PINs. A stolen key can let attackers restore backups, read private an

Prediction market platform Polymarket lost $3.1 million after attackers breached a third-party frontend vendor and drained funds from 11 user wallets. The platform's own audited smart contracts remained intact throughout the incident. According to a report, the stolen PUSD tokens were moved from Pol

Polymarket said it will fully repay users after a compromised vendor script drained about $3 million from fewer than 15 accounts. Key Points: Polymarket said a third-party vendor compromise injected malicious code into its frontend. Security researchers tracked about $3 million in losses across fewe