Hackers Hijack 10 npm Packages to Spread PolinRider Malware Using Ethereum Blockchain
PolinRider loaders use a fixed Ethereum wallet to dynamically fetch payloads via dead drop, bypassing install hooks.
Stories per day · 30 days
6 RSS
Relatedethereum7chainalysis3consensus3cryptocurrency2eip-15592polkadot2post-quantum2agentic-ai1ai-agents1attack-analysis1benchmark1binance1bitcoin1bls1byzantine-agreement1certification1classification1cosmos1
73 stories, newest first · one card per story
Stories tagged #blockchain
Chainalysis says breach exposed every customer's credentials and tokens
The login portal, Reactor, KYT, and address screening are offline; users must reset passwords and rotate API keys.
1
Replication certificate verifies deposited datasets and code for publications
Cryptographically signed record allows anyone to check replication files without journal reanalysis.
GRIDSHIELD verifies grid feasibility in P2P energy trading
GRIDSHIELD clears sealed bids order-independently and proves grid feasibility via aggregated congestion-feasibility proof without trusted setup.
Chainalysis discloses breach after AI-driven intrusion
Accessed data was limited to user IDs, names, emails, and role labels; the victim count is undisclosed.
1
On-chain behavioral signatures classify centralized exchange addresses
LightGBM outperforms logistic regression reaching PR-AUC 0.9594 on 3 million Ethereum addresses.
EIP-7702 enables new Ether redirection attacks on Ethereum
EERA attacks redirect ETH to malicious sweeper contracts, with 70% of delegations being malicious and many victims failing to revoke them.
Binance confirms $6.3 billion crypto theft and freezes about half
Assets moved across 20 blockchains in about 20 minutes; Binance says customer losses will be covered.
AuditFL: A Contract-Backed Clearing Layer for Open Federated Learning
AuditFL adds on-chain auditability to federated learning using contract-backed tickets and off-chain model storage
UniPCH framework separates channel execution from private cross-chain payments
A Go prototype of UniPC plus selective re-signing blind conditional signatures is faster than comparable schemes under most tested delays.
Quantum Cadence proposes post-quantum consensus without quorum certificates
In 200-validator simulations, Quantum Chorus matches Chorus latency and scales better as the number of proposers grows.
CONSTRAINTDIAL mutates protocols to build smart contract security tasks
From 203 public cases it builds 3,045 detect, exploit, and patch tasks that copied answers solve less often.
SILMARILS-MV offers dealer-free signatures for permissioned blockchains
Threshold notarization keeps certificates at 32(ω+1) bytes and cuts authentication traffic 22x versus ML-DSA-44 at 1,000 validators.
DLT Terms 100 glossary organizes blockchain terms from ISO 22739:2024
The proposal labels terms by how often they appear in selected literature and by difficulty.
Paper proposes EIP-1559 extension admitting some transactions below the base fee
Selected early-execution consumers fund providers that opt out of the early region, with surplus burned and eight properties proved.
Paper proposes Proof-of-ML-Inference to replace hash mining
Miners would run requested model inference; a simulation kept block times near the calibrated target.
Multi-chain coupling shrinks safe EIP-1559 fee update rates
Cross-chain delay cuts the safe base-fee update space by up to 84.8% and can destabilize otherwise stable peer chains.
On the Robustness of Gossip Protocols in Modern Blockchains
Study finds common blockchain gossip settings may fail to deliver quorum messages under realistic adversaries.
Understanding Verification Vulnerabilities in Cross-chain Bridges: An Empirical Study
Study of 36 cross-chain bridges finds 830 verification-vulnerability instances across 11 patterns.
One Node, Two Roles: Simultaneous Contests for Validation and Attention in Rollups
Coupled contest analysis finds TRACE can raise optimistic-rollup execution diversity more than Proof of Diligence.
Hackers Use Negative Hotel Reviews to Spread Malware That Hides C2 on Blockchain
Cofense says hotel staff are phished with fake complaints that deliver EtherRAT and TONResolver using blockchain C2.
1
Hackers Use Web3 and Blockchain C2 to Hide Supply Chain Attacks Targeting Cloud Credentials
Unit 42 says the ChainDrop npm worm uses Ethereum smart contracts as C2 to steal cloud and developer credentials.
Hackers Target Hotels With Fake Guest Complaints to Deploy Blockchain-Based RAT Malware
Hotel staff are phished with fake guest complaints that deliver EtherRAT and TONResolver using blockchain C2 lookups.
ChainDrop and PolinRider Use Blockchain C2 to Steal Cloud and CI/CD Credentials
ChainDrop and North Korea-linked PolinRider use blockchain C2 to steal cloud and CI/CD credentials.
6