North Korean developers hijack dormant Waves repository, plant credential-stealing code in wallet update

2025/06/19 17:05

PANews reported on June 19 that according to Cryptoslate, a North Korean developer has obtained advanced permissions in the Keeper-Wallet code base of Waves Protocol. The account "AhegaoXXX" has pushed updates to the dormant code base since May 2025. The account has been confirmed to be associated with North Korea's IT outsourcing organization. Code review found that a commit added the function of sending wallet logs and runtime errors to an external database, which may steal mnemonics and private keys. Although the branch has not been merged, the attacker has released six malicious NPM packages that have not been updated for a long time by controlling the account of former Waves engineer Maxim Smolyakov.

The security report pointed out that this incident shows that North Korean hackers have shifted from ordinary outsourcing infiltration to direct control of code bases. It is recommended that the development team strengthen supply chain protection, including auditing contributor permissions, cleaning dormant accounts, and monitoring repository redirection. Currently, the download volume of the affected software is low, but Waves users who update Keeper-Wallet are at risk of credential leakage.

Clause de non-responsabilité : les articles republiés sur ce site proviennent de plateformes publiques et sont fournis à titre informatif uniquement. Ils ne reflètent pas nécessairement les opinions de MEXC. Tous les droits restent la propriété des auteurs d'origine. Si vous estimez qu'un contenu porte atteinte aux droits d'un tiers, veuillez contacter service@support.mexc.com pour demander sa suppression. MEXC ne garantit ni l'exactitude, ni l'exhaustivité, ni l'actualité des contenus, et décline toute responsabilité quant aux actions entreprises sur la base des informations fournies. Ces contenus ne constituent pas des conseils financiers, juridiques ou professionnels, et ne doivent pas être interprétés comme une recommandation ou une approbation de la part de MEXC.

Vous aimerez peut-être aussi

Use XRP to Mine Bitcoin with The ALL4 Mining Cloud Mining Service Provider and Turn Your Holdings into Daily Income

Use XRP to Mine Bitcoin with The ALL4 Mining Cloud Mining Service Provider and Turn Your Holdings into Daily Income

In the rapidly evolving cryptocurrency landscape, savvy investors are no longer simply holding onto their assets – they’re letting them work. A growing number of XRP holders are leveraging ALL4 Mining’s highly efficient computing platform, which remotely powers Bitcoin mining machines without the need for physical hardware. What is Bitcoin Cloud Mining? Bitcoin cloud mining is a method of mining Bitcoin remotely over the internet. Unlike traditional Bitcoin mining, users do not need to purchase and maintain physical mining machines and other related hardware. Instead, they can pay a subscription or lease fee to access the mining resources of a data center. These data centers are often located in locations with lower electricity and maintenance costs, making mining more economical. The basic principle of cloud mining is that users sign a contract with a cloud mining service provider and select a suitable mining package, which typically involves a certain initial fee and a service period. Once the contract is in place, the service provider is responsible for maintaining and operating the mining equipment and distributing the cryptocurrency earned to the user in the agreed-upon proportions. How to Mine Bitcoin on ALL4 Mining? Step 1: Register an Account Create your free account in less than a minute and receive a $15 welcome bonus, which will allow you to earn $0.60 per day in free initial deposits. Step 2: Top up your account: Obtain your cryptocurrency deposit address on the deposit page and complete the transfer (you can participate with as little as $100). Step 3: Choose a Plan Choose from a variety of mining plans to meet your financial goals. Whether you’re looking for short-term gains or long-term returns, ALL4 Mining has something for you. Click to view more online contracts Step 4: Start Earning You earn with no management required. Daily profits will be automatically credited to your account the day after you purchase the contract. When your account reaches $100, you can choose to withdraw it to your crypto wallet or continue purchasing contracts to earn more profits. ALL4 Mining’s Core Advantages Include: Powered by renewable energy: Mines are located in Northern Europe, Canada, Asia, and North America, regions with abundant green energy resources. All operations rely on solar, hydropower, and wind power. Deposits and withdrawals are available in a variety of cryptocurrencies: DOGE, BTC, ETH, SOL, XRP, USDC, LTC, USDT-TRC20, USDT-ERC20, and more. Affiliate program: This affiliate program allows users to earn up to 3% + 1.5% referral rewards and up to $30,000 in bonuses. Compliance and transparency: The company is registered in the UK and operates legally, ensuring transparency and compliance on the platform, protecting user rights. About ALL4 Mining ALL4 Mining is a rapidly growing digital asset mining service provider and a leading global cloud mining service provider. Founded in January 2019 and headquartered in the UK, ALL4 Mining has grown over the years to include over 200 mining farms worldwide, with members in over 200 countries and trusted by over 9 million users worldwide. We believe that everyone should benefit from cloud mining and aim to be a leader in the cloud mining industry. Security and Sustainability Trust and security are paramount in the cryptocurrency mining industry. Our transparent and compliant cloud mining platform works to ensure the safety of every user’s assets. Conclusion As Bitcoin continues to capture the attention of cryptocurrency enthusiasts worldwide, ALL4 Mining offers a unique opportunity to convert this momentum into real daily returns—all powered by sustainable energy and backed by enterprise-grade security. Whether you’re mining Dogecoin, Bitcoin, or XRP, ALL4 Mining makes mining simple, transparent, and efficient. Click to download Google Apps
Partager
CryptoNews2025/08/16 13:00