Security Breaches Hit Cointelegraph and CoinMarketCap Over Weekend

By: Isha Das

Recent security breaches at two major cryptocurrency platforms, Cointelegraph and CoinMarketCap, have raised alarms about the vulnerabilities within high-traffic crypto websites. Both platforms experienced attacks that compromised their front-end interfaces, putting users at risk of phishing scams and asset theft.

The incident involving Cointelegraph occurred on June 22, exposing users to a fraudulent pop-up prompting them to connect their crypto wallets. This pop-up was a part of a counterfeit campaign promoting a fake Cointelegraph token (CTG) and an initial coin offering (ICO). Blockchain security firm Scam Sniffer first flagged the malicious activity, identifying the threat as a JavaScript payload linked through the platform's advertising infrastructure. Once users connected their wallets, scammers could potentially drain their assets. Cointelegraph advised users to be wary of any pop-ups promoting "CTG tokens" or "CoinTelegraph ICO airdrops" and assured that measures were being taken to remove the harmful code.

Two days before the Cointelegraph breach, on June 20, CoinMarketCap faced a similar attack where users encountered a deceptive wallet prompt on its homepage. The source of this vulnerability was traced to unauthorized JavaScript related to a doodle image displayed on the site. While the nature of the messages differed, both scams leveraged ad-based JavaScript exploits, suggesting a coordinated effort to target prominent cryptocurrency websites.

Prominent figures in the crypto community, including former Binance CEO Changpeng Zhao, have commented on these attacks, emphasizing the need for heightened vigilance. Zhao pointed out that 39 users suffered financial losses during the CoinMarketCap incident, totaling $18,570. He warned that hackers are increasingly targeting trusted platforms to execute wallet-draining schemes, underscoring the critical importance of users remaining vigilant, avoiding unknown dApps, and closely monitoring their wallet activities to mitigate risks.

The recent breaches serve as a stark reminder of the persistent and evolving threats facing the cryptocurrency space. As crypto continues to grow in popularity, so does the sophistication of attacks targeting both individuals and large platforms. The incidents at Cointelegraph and CoinMarketCap highlight the essential need for robust security measures and continuous vigilance among all crypto stakeholders.