Slow Fog CISO: The Coinbase Commerce asset recovery page sitemap also has flaws, posing a phishing attack risk
By: www.chaincatcher.com|03/19/2026 04:42:00
0
Share
Prefer us on Google
After Slow Mist founder Yu Xian disclosed that the Coinbase Commerce asset recovery page directly requires users to enter plaintext mnemonic phrases, Slow Mist's Chief Information Security Officer 23pds added that the sitemap of that page also has flaws, allowing malicious attackers to easily use tools like ResourcesSaver to download the frontend code and deploy similar websites.
If combined with similar domain names like Coinbase for phishing attacks, users can easily fall victim.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Zcash’s planned Sprout freeze would leave private keys unable to move funds
Zcash’s proposed NU7 upgrade would end Sprout spending even with intact keys. Mainnet timing awaits a decision planned for October 20.
Bitcoin or Dollar Returns: Same Strategy, Opposite Results
Bitcoin or dollar returns: in 2022, the same 5% strategy ended at -62% or +5% depending on the currency of account. What the saver needs to know.
Stablecoin Payments Surge 45% Despite No New Supply
Bitcoin: AI Crash or Superabundance, Bitwise Sees Only One Winner
For Matt Hougan, Chief Investment Officer at Bitwise, Bitcoin emerges as a winner from both an AI crash and a productivity boom. Three macro scenarios.
Crypto doesn’t need your party to win, just its candidates
Fairshake's bipartisan election spending shows how they back both parties' candidates, and why election wins don't guarantee legislation.
BitTorrent Ushers in Next-Gen Web3 Infrastructure with Strategic Rebrand and Inaugural BTT Burn
Bitcoin’s Quantum Transition Won’t Stop at Bitcoin
Michael Saylor hints at more Bitcoin buys as Strategy holds 848,250 BTC
JUST Completes 5th JST Buyback & Burn: Over 170M Tokens (~$23.53M) Burned Ahead of Major Deflationary Upgrade
JUST completes its fifth JST buyback and burn, removing over 170 million tokens worth $23.53 million as it prepares to upgrade the revenue-funded program.
AI Model Claude Discovers 25-Year-Old US Cryptography Secret; Satoshi's Choice Under Scrutiny Again
Crypto: Ethereum Prepares for a Historic Increase in Gas Limit with Glamsterdam
Global Liquidity: Could the Japanese Oil Crisis Collapse US Treasuries?
BIS: Bank rate hikes cut stablecoin growth by 3 points
CryptoQuant CEO sees $30,000 Bitcoin floor even if ETFs and treasury firms exit
CryptoQuant CEO Ki Young Ju argues Bitcoin could find support near $30,000 even after a hypothetical exit by spot ETFs and corporate treasuries.
ZKsync vs Starknet: Which ZK Rollup is Superior?
ZKsync vs Starknet: Starknet recorded 7.31 times the number of transactions over 30 days compared to ZKsync Era, while its collateral value was only 1.96 times higher. This article organizes objective metrics comparing proof methods, gas tokens, L2BEAT stages, and supply differences.
Why does Circle keep only 7 cents for every dollar it earns?
Bitcoin: Arthur Hayes Sees an Opportunity in the AI Bubble
Chip Bets Lost $52 Million in 10 Minutes with Wall Street Closed
Bitget restricts users in Russia and Belarus under new rules
Raydium Quarterly Report Analysis: Trading Fees Triple, Q4 Growth Sustainability in Doubt
Stablecoins: Banks Can Curb Their Growth Through Savings
Bitcoin: Should We Fear a Black Monday for Cryptocurrencies?
Bitcoin holds at $81,600 but Wall Street emerges from its worst week since June. Oil, rates, AI: should we fear a black Monday in the crypto market?
Let the Safest Assets Bear Losses First? A Counterintuitive New Approach to On-Chain Distribution
Google's Quantum Chip Achieves 99.99% Accuracy: What This Means for Bitcoin
Google's quantum chip has made a significant leap forward: the company has learned to perform one of the key operations of quantum computing with 99.99% accuracy, while simultaneously reducing the number of errors by 40 times. Brivael Le Pogam, co-founder and head of the AI startup Argil AI from the...
Kraken's New Leader, After Acquiring European Bank, Aims to Disrupt the Crypto Market?
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Zcash’s planned Sprout freeze would leave private keys unable to move funds
Zcash’s proposed NU7 upgrade would end Sprout spending even with intact keys. Mainnet timing awaits a decision planned for October 20.
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
