Slow Fog CISO: The Coinbase Commerce asset recovery page sitemap also has flaws, posing a phishing attack risk
By: www.chaincatcher.com|03/19/2026 04:42:00
0
Share
Prefer us on Google
After Slow Mist founder Yu Xian disclosed that the Coinbase Commerce asset recovery page directly requires users to enter plaintext mnemonic phrases, Slow Mist's Chief Information Security Officer 23pds added that the sitemap of that page also has flaws, allowing malicious attackers to easily use tools like ResourcesSaver to download the frontend code and deploy similar websites.
If combined with similar domain names like Coinbase for phishing attacks, users can easily fall victim.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Web3 Developer brucexu.eth Falls Victim to Recruitment Phishing, Cursor Project Infected with Trojan
APT29 Organization Spreads iOS and Android Exploit Tools Through Compromised Websites
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Thailand is cutting off Bitget. Users have until December 5 to prepare
Thailand will block Bitget on December 5. The SEC urges users to review their holdings, while account-specific withdrawal access remains unverified.
US Adds 165,000 Jobs in October: Why Bitcoin Traders Are Watching the Fed
US sanctions hit 41 companies accused of keeping Prince Group’s scam network running
US sanctions target four people and 41 companies tied to Prince Group. Treasury says the network kept scam-linked operations running.
Zcash’s new security fund is 99.7% old money
An early November 7 snapshot shows Zcash’s reserve is mostly old unclaimed rewards. New fees are accumulating, but future payouts depend on usage.
TeraWulf Says AI Leasing Now Generates 83% of Revenue as Bitcoin Mining Recedes
Google buys Crusoe's data center in Wyoming for $17 billion
Higher wages don’t have to mean higher inflation. That could matter for Bitcoin
US labor costs fell as productivity outpaced pay in Q3. Why higher wages alone do not settle the inflation outlook or Bitcoin’s rates risk.
Solana’s October Upgrade Review Puts 200ms Slots and $5B in Tokenized Assets in Focus
Despite the decline, Bitcoin has not lost the game against gold
Aave Labs Acquires Avon to Launch Fixed-Rate Lending on Its Protocol
Aave Labs acquires the startup Avon and its team to launch fixed-rate lending on its protocol, which manages $30 billion in deposits.
Wall Street can stop a tokenized share, but can it stop a stock perp?
Wall Street is divided over tokenized shares and stock perpetual futures as companies object and traditional exchanges challenge regulators.
Elizabeth Warren May Take Control of the Senate Banking Committee. Trump and the Crypto Industry Will Be in the Crosshairs
BitFuFu’s October Bitcoin Mining Output Falls Despite Steady Hashrate
Strive Reports $509M Quarterly Profit as Bitcoin Buying Accelerates
Stablecoin contraction forces Bitcoin drop despite Fed reserve gains
US bank reserves rose $67.5 billion as stablecoins shrank $5.7 billion, raising questions about Bitcoin’s recovery.
Nigeria: Mandatory License for Stablecoins, Algorithmic Models Banned
The Central Bank of Nigeria imposes a license on stablecoin issuers, requires token approval, and bans algorithmic stablecoins.
Follow the Money: $43.5 Million in Six Rounds, Revolut Valued at $115 Billion and the Choice of Blockchain Services
SEC Sell-Off Documents Reveal: 9 AI Giants' Executives Cashed Out $7.4 Billion Before US Stock Market Crash
As U.S. tech stocks faced historic market value evaporation, core executives from nine AI unicorns, including Nvidia, Broadcom, AMD, and CoreWeave, cashed out $7.4 billion through 282 Form 4 filings.
U.S. Congresswoman Maxine Waters Announces Candidacy for Chair of House Financial Services Committee! Aims to Establish Strict Yet Fair Rules for Legitimate Cryptocurrency Businesses
Binance Founder Changpeng Zhao Shares Warning on Windows Paint Vulnerability CVE-2026-83844, Urges Immediate OS Update
Rates Down 25%, Buybacks Up 7%, Will Derive's 'Price-for-Volume' Market Pay Off?
Crypto VC funding: Uranium Digital raises $16.5m, LO:TECH secures $12m
Cybersecurity: What the $6.3 Billion Hack Warns Argentina About
Web3 Developer brucexu.eth Falls Victim to Recruitment Phishing, Cursor Project Infected with Trojan
APT29 Organization Spreads iOS and Android Exploit Tools Through Compromised Websites
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
