Twenty malicious packages impersonating the Hardhat development environment used by Ethereum developers are targeting private keys and other sensitive data. Collectively, the malicious packages have ...

Four npm packages uploaded since Sep 2023 impersonate Flashbots, stealing Ethereum keys and seeds via Telegram ...

A malicious Python Package Index (PyPI) package named "set-utils" has been stealing Ethereum private keys through intercepted wallet creation functions and exfiltrating them via the Polygon blockchain ...

The social recovery tool requires users to have first transferred all their assets to an invoker contract, which will perform all future transactions for the user. Ethereum users may no longer need to ...

On May 26, 2025, a crypto investor fell victim to a series of onchain phishing attacks. Crypto compliance firm Cyvers announced that the victim lost a total of $2.6 million worth of cryptocurrencies.