Slow Fog CISO: The Coinbase Commerce asset recovery page sitemap also has flaws, posing a phishing attack risk
By: www.chaincatcher.com|03/19/2026 04:42:00
0
Share
Prefer us on Google
After Slow Mist founder Yu Xian disclosed that the Coinbase Commerce asset recovery page directly requires users to enter plaintext mnemonic phrases, Slow Mist's Chief Information Security Officer 23pds added that the sitemap of that page also has flaws, allowing malicious attackers to easily use tools like ResourcesSaver to download the frontend code and deploy similar websites.
If combined with similar domain names like Coinbase for phishing attacks, users can easily fall victim.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Firedancer makes bounty hunters burn 1 SOL even for duplicate bug reports
Firedancer requires a non-refundable 1 SOL burn for bug-bounty eligibility, even for duplicates. Later reports can still earn discretionary rewards.
Interpol: 1,462 Arrests and Crypto Money Laundering Networks Dismantled in Africa
NYSE’s owner is backing 24/7 stock tokens without Wall Street’s usual price rules
NYSE owner ICE backs OKXICE's 24/7 stock token plans as 16 issuers object and automated liquidity pools raise pricing issues.
Bitcoin Hashrate Reclaims One Zettahash As Mining Competition Rebounds
Will Anthropic Delay Its 'Super IPO' Amid AI Trading Collapse? The Scheduled Listing Date in Mid-November Approaches
The time window is extremely tight—according to SEC regulations, the S-1 filing must be submitted by next week at the latest, with market predictions giving an 80% chance of an IPO this year. The AI sector's sell-off casts a shadow over the IPO prospects, as a previous plan for a September listing h...
Researcher Reports Flaw in Cake Wallet That Could Divert Bitcoin Payments
Tokenized Stocks: Why 22 Giants Reject OKX and ICE's Plan
Tenstorrent's round accounts for 85.1% of crypto venture capital funding
Trump Prepares for Possible Escalation of Military Actions Against Iran After U.S.-Israel Elections
Crypto: The Pentagon bans its soldiers from betting on Polymarket and Kalshi
Pete Hegseth prohibits U.S. military personnel from betting on Polymarket and Kalshi using non-public information, following the indictment of a soldier.
Chain Theory Proposes Deriving the Fine Structure Constant Using Quantum Information
Chain Theory, a research program proposed by @alexwg, claims to derive a candidate for the fine structure constant from an axiom about quantum pairs. Its agreement with the value recommended by CODATA is striking, but the identification with the physical constant remains a conjecture that new measur...
Ethereum sees biggest exchange withdrawal in four months as October ETF losses top $1 billion
Ethereum's $407 million exchange withdrawal puts $2,400 in focus as traders assess whale positioning, ETF flows and fading altcoin momentum.
Wall Street's $359 billion-a-day repo market has found a use for blockchain
Wall Street is using blockchain to borrow billions through tokenized repo, cutting costs without eliminating traditional funding risks.
Delay of the Glamsterdam Update on Ethereum Postpones Activation on Hoodi
JPMorgan Now Offers Two Tokenized Money Market Funds on Solana
Overview of Cryptocurrency Asset Regulation Series (11): South Africa, From FSCA License to Cross-Border Reporting
Cryptocurrencies: This Venture Capital Giant Drops the Word from Its Name and Turns to AI
a16z Crypto becomes a16z Frontier: Chris Dixon's fund expands its scope to AI and autonomous machines while maintaining its crypto bets.
Follow the Money: $630 Million for Strive, Tether Activity and Attention to CeFi
Arthur Hayes exits Maelstrom trades as $22.28m in token sales emerge
Ghanem Saudi Arabia Raises an Additional $1.5 Million, Bringing Total Funding to $8.6 Million
Ethereum staking yield is losing to cash rates, so why are investors still lining up?
Ethereum staking barely beats euro term deposits, yet 1.38 million ETH is queued. Here's why investors still accept the risk.
Bitcoin: Why JPMorgan Reports an Average Return of 20.9% but Only 10% Per Year
JPMorgan attributes an average return of 20.9% to Bitcoin but only 10% per year compounded. Where does this 11-point gap come from, and why does volatility cost so much?
Turning Speculation into Business: Standard Reserve's Stock Liquidity Experiment
Stablecoins: FSB Admits to G20 It Monitors $300 Billion with Private Data
FSB note to G20 on October 12: $300 billion in stablecoins, 99% in dollars, and regulators relying on private compilers to monitor them.
Solana Reduces Transaction Finalization Time to About 1/85 with 'Alpenglow' Now Live on Mainnet
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Firedancer makes bounty hunters burn 1 SOL even for duplicate bug reports
Firedancer requires a non-refundable 1 SOL burn for bug-bounty eligibility, even for duplicates. Later reports can still earn discretionary rewards.
...
Contents
Latest articles
10/24/2026
10/24/2026
Latest coin listings on WEEX
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
