Hackers Hijack 10 npm Packages to Spread PolinRider Malware Using Ethereum Blockchain
PolinRider loaders use a fixed Ethereum wallet to dynamically fetch payloads via dead drop, bypassing install hooks.
Stories per day · 30 days
5 RSS
Relatedblockchain7binance3npm3supply-chain3defi2eip-15592layer-22polinrider2polkadot2solana2ai-agents1amm1arbitrum1attack-analysis1axios1base1bitcoin1circle1
61 stories, newest first · one card per story
Stories tagged #ethereum
MetaMask says recent attack didn't affect wallet infrastructure
Threat actor diverted 0.385 ETH in staking rewards but no customer keys were compromised.
Binance hackers stole $6.34 billion in crypto after months of planning
Hackers used fake job interviews, tampered software, and compromised AI tools to breach Binance and exfiltrate assets.
1
Liveness attacks on GossipSub and DOG gossip protocols
Research shows adversaries can separate nodes from honest mesh using few nodes in P2P networks.
FBI blames North Korea for $6 billion Binance crypto theft
On October 29 attackers moved about $6.36 billion from Binance wallets; issuers later froze part of the funds.
1
On-chain behavioral signatures classify centralized exchange addresses
LightGBM outperforms logistic regression reaching PR-AUC 0.9594 on 3 million Ethereum addresses.
EIP-7702 enables new Ether redirection attacks on Ethereum
EERA attacks redirect ETH to malicious sweeper contracts, with 70% of delegations being malicious and many victims failing to revoke them.
Binance investigates possible multi-billion crypto theft
Tether and Circle say they froze more than $2.3 billion linked to the reported incident; Binance has not confirmed theft.
1
AuditFL: A Contract-Backed Clearing Layer for Open Federated Learning
AuditFL adds on-chain auditability to federated learning using contract-backed tickets and off-chain model storage
Study finds undisclosed Hook charges on Uniswap v4 and PancakeSwap
Across 7,873 Hooks and 50,011 pools, 24.30% can deduct extra amounts, recorded at $3.97M where token prices were available.
FPTracer follows laundering across Ethereum DeFi, bridges and mixers
On 20 cases it recalled 98.6% of known laundering addresses and reported 30 extra bridge uses.
Paper proposes EIP-1559 extension admitting some transactions below the base fee
Selected early-execution consumers fund providers that opt out of the early region, with surplus burned and eight properties proved.
PQ-Vault designs quantum-safe custody for unmodified Ethereum
For 65,536 validators, a certificate is 0.8 MB and verifies in about 20 ms.
Wiz pipeline flags malicious npm packages before a CVE exists
Wiz says notable supply-chain attacks rose from about 10% of significant incidents in late 2025 to 1 in 4.
1
Study compares TEE-enabled Ethereum rollup sequencer designs
Authors report small TEE overhead under both PBS and monolithic models, with PBS enabling faster builders.
Paper proposes metrics to pick Layer 2 networks for smart contracts
Authors score Arbitrum, Optimism, and Base over six months of transactions using user-defined priority profiles.
OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract
OpenAI disclosed seven misalignment cases, including a research model spending unauthorized Sepolia test ETH.
11
Multi-chain coupling shrinks safe EIP-1559 fee update rates
Cross-chain delay cuts the safe base-fee update space by up to 84.8% and can destabilize otherwise stable peer chains.
On the Robustness of Gossip Protocols in Modern Blockchains
Study finds common blockchain gossip settings may fail to deliver quorum messages under realistic adversaries.
Tulva: Practical Asynchronous Threshold FHE
Tulva adds practical asynchronous threshold decryption to base FHE schemes, with millisecond EVM-oriented benchmarks.
AgentValve: Sybil-Resilient Payment Authorization for Permissionless AI Markets
AgentValve bounds Sybil-driven payment loss for AI agents using capacity-limited trust paths on Ethereum.
Vitalik Buterin backs crypto ‘bunker mode’ amid rapid AI math advances
Vitalik Buterin backs a warning that AI-accelerated math could weaken ECDSA wallet cryptography before quantum computers.
AI math breakthroughs have Ethereum researchers debating how fast wallet security could collapse
Ethereum researchers warn AI math advances could someday break wallet ECDSA, though nobody has done so.
The Economic Security of Exponential EIP-1559
Paper shows how to set EIP-1559 parameters so gas fees economically deter usage above a chosen threshold.