search
Homeweb3.01inch Users Cautioned Against Any Interactions as Its Website Gets Breached

Decentralized exchange aggregator 1inch's website has been breached along with multiple other platforms that use the same frontend library, Lottie Player.

1inch Users Cautioned Against Any Interactions as Its Website Gets Breached

Decentralized exchange aggregator 1inch’s website has been breached along with multiple other platforms that use the same frontend library, Lottie Player.

The breach was discovered after users reported suspicious activity on their wallets following interactions with these platforms. Upon investigation, it was found that malicious code had been injected into the Lottie Player, a widely-used animation library used by several dApps and non-crypto websites.

As of now, no user wallets have been reportedly compromised. However, 1inch users are being cautioned against any interactions with the platform until the issue is fully resolved.

According to several posts on X (formerly Twitter), 1inch and TEN Finance are the confirmed victims of this attack so far. However, the number could be much higher, as the exploit targeted Lottie Player versions 2.0.5 and above.

Hackers have reportedly injected malicious code into the front-end JSON files of websites using these versions. This code now enables the compromised sites to perform unauthorized transactions, posing a severe threat to users’ assets and data.

Reports from Blockaid indicate that the attack was introduced through a compromise of Lottie Player’s content server, where a malicious npm package was used to distribute altered code. Blockaid and other security firms have confirmed the injection of unauthorized scripts within the package.

“Legitimate sites (non crypto as well) are now serving malicious content, including anti-debug evasion code. @LottieFiles, it looks like attackers have managed to push malicious versions of your package, with another version being uploaded now,” Blockaid wrote in an X (formerly Twitter) post.

At the time of writing, 1inch hasn’t released any official statement on the breach. However, the Lottie Player team has confirmed that they were able to identify the cause of the breach and are working on removing the affected versions.

Users are strictly advised to avoid connecting wallets or interacting with affected platforms until the security issues are fully resolved.

The above is the detailed content of 1inch Users Cautioned Against Any Interactions as Its Website Gets Breached. For more information, please follow other related articles on the PHP Chinese website!

Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
As Fear Drives Selling, BlockDAG (BDAG) Stands Out from the CrowdAs Fear Drives Selling, BlockDAG (BDAG) Stands Out from the CrowdApr 13, 2025 am 11:48 AM

As fear drives selling in the crypto market, major coins like Cardano and Solana face tough times.

The general crypto market has recovered as digital assets shake off bearish sentimentsThe general crypto market has recovered as digital assets shake off bearish sentimentsApr 13, 2025 am 11:46 AM

In the past 24 hours, the general crypto market has recovered as digital assets shake off bearish sentiments. Within this time frame

Bitcoin's Current Cycle Shows Strong Similarities to the Structural Resets Seen in Both 2017 and 2021.Bitcoin's Current Cycle Shows Strong Similarities to the Structural Resets Seen in Both 2017 and 2021.Apr 13, 2025 am 11:44 AM

Key market indicators, like the relationship between Bitcoin and market volatility (BTC/VIX ratio) and the total crypto market capitalization on weekly charts

New Meme Coins to Watch Now: Cheems Token, Siren, and PeiPeiNew Meme Coins to Watch Now: Cheems Token, Siren, and PeiPeiApr 13, 2025 am 11:42 AM

As meme coins continue to take the crypto world by storm, savvy investors are constantly looking for the next big opportunity.

The Crypto Market Has Witnessed a Rebound Following the Recent Sheer DownturnThe Crypto Market Has Witnessed a Rebound Following the Recent Sheer DownturnApr 13, 2025 am 11:40 AM

The crypto market has witnessed a rebound following the recent sheer downturn. As per the exclusive market data, the total crypto market capitalization has reached $2.71Ts

He got rich off pixelated punks — and punked the Internal Revenue Service in the processHe got rich off pixelated punks — and punked the Internal Revenue Service in the processApr 13, 2025 am 11:38 AM

A Pennsylvania man faces federal prison after pleading guilty to flipping more than $13 million worth of digital art from the infamous CryptoPunks NFT collection — and reporting none of it to the IRS, prosecutors said Friday.

Trending Meme Coins To Buy NowTrending Meme Coins To Buy NowApr 13, 2025 am 11:36 AM

In recent times, meme coins have emerged as a unique and exciting investment opportunity, drawing both seasoned investors and newcomers alike.

Toncoin (TON) Appears to Be Positioning Itself for a Short-term ReboundToncoin (TON) Appears to Be Positioning Itself for a Short-term ReboundApr 13, 2025 am 11:34 AM

Toncoin appears to be positioning itself for a short-term rebound after enduring a week of market-wide losses that affected most cryptocurrencies.

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

AI Hentai Generator

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. Best Graphic Settings
3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. How to Fix Audio if You Can't Hear Anyone
3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌
WWE 2K25: How To Unlock Everything In MyRise
4 weeks agoBy尊渡假赌尊渡假赌尊渡假赌

Hot Tools

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

mPDF

mPDF

mPDF is a PHP library that can generate PDF files from UTF-8 encoded HTML. The original author, Ian Back, wrote mPDF to output PDF files "on the fly" from his website and handle different languages. It is slower than original scripts like HTML2FPDF and produces larger files when using Unicode fonts, but supports CSS styles etc. and has a lot of enhancements. Supports almost all languages, including RTL (Arabic and Hebrew) and CJK (Chinese, Japanese and Korean). Supports nested block-level elements (such as P, DIV),

DVWA

DVWA

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

Dreamweaver Mac version

Dreamweaver Mac version

Visual web development tools

SecLists

SecLists

SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.