Slow Fog CISO: The Coinbase Commerce asset recovery page sitemap also has flaws, posing a phishing attack risk
By: www.chaincatcher.com|03/19/2026 04:42:00
0
Share
Prefer us on Google
After Slow Mist founder Yu Xian disclosed that the Coinbase Commerce asset recovery page directly requires users to enter plaintext mnemonic phrases, Slow Mist's Chief Information Security Officer 23pds added that the sitemap of that page also has flaws, allowing malicious attackers to easily use tools like ResourcesSaver to download the frontend code and deploy similar websites.
If combined with similar domain names like Coinbase for phishing attacks, users can easily fall victim.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Sam Altman's Bitcoin Life Insurance Raises 6 Billion Yen, Demand Grows Among Wealthy
FED Governor Anticipates More Interest Rate Hikes
Wealth Gap Widened After Pandemic: U.S. Federal Reserve Reports Lower Net Worth for Bottom 25%
Bitcoin beats gold and stocks with 633% real return, study finds
Bitcoin: This Mining Giant Sells Its BTC to Pivot to AI
MARA sent $81.1 million in BTC to Galaxy Digital. Its Bitcoin treasure decreases as the miner pivots to AI.
Crypto Wallets: Mandatory Declaration Adopted for Amounts Exceeding €100,000
Severe Criticism from the Senate of the U.S. Treasury Buyback Policy; An Intervention That Backfired
Stablecoins: The Fed Proposes 2 Days for Redemption
唐华斑竹: GOAT Network Shows Market Potential in Seoul
NBA Requests Access to Prediction Market Data to Detect Manipulation
Adam Silver states that the NBA needs access to prediction market data to detect suspicious operations and protect sports integrity. His request coincides with a regulatory dispute in which the NFL has asked the Supreme Court to intervene, while leagues and courts debate whether these contracts shou...
Russia Used ChatGPT for Operations in Argentina and Bolivia
The Crucial Significance of Next Week's US CPI: Will the Fed Hold Rates Steady in October?
"Real-life payment penetration"... Digital asset card payments in Q3 up 33% from the previous quarter
Cryptocurrencies, Children from Uganda, and an Accusation Shaking Flavio Bolsonaro's Campaign
Major Buyer Exiting Soon: Who Will Absorb the Potential Selling Pressure of Over $7 Million in ETH Daily?
30-Year Rate at 5.7%: Bitcoin Stuck Between the Fed and Debt
Crypto fund flows are slowing down after $11.1 billion. According to CoinShares, the U.S. bond market now weighs more than the Fed.
Zcash Pushes for Quantum-Resistant Payment Implementation by January Next Year
OJK Prepares New Crypto Trading System in Indonesia, Will the Role of Exchanges Change? - Fintech World
The Financial Services Authority (OJK) is preparing a significant change in the mechanism of cryptocurrency trading in Indonesia. Through a system.
Endeavor Catalyst Raises $320 Million to Invest in Startups Outside Silicon Valley
IPCA Above the Target Ceiling: What Changes for Interest Rates and Investments
Behind the Boom of Stock Tokenization: Who is Making Money and Who is Being Used?
Ondo Private Markets Launches Tokenized Pre-IPO AI Notes: How They Work, Who Can Buy, and Why They Are Not Shares
Ondo Private Markets offers tokenized pre-IPO AI notes for non-US investors. Here is how they work, who can buy, and the key risks.
Insights from TOKEN2049: What Changes Are Happening in the Industry?
Samsung Wallet Adds USDC on Solana for 82 Million US Galaxy Devices: What Launches in October and What Remains Unconfirmed
Samsung Wallet will launch USDC support in late October for eligible Galaxy users in the United States. Here is what Samsung and Solana have confirmed — and what remains unclear.
When Agents Learn to 'Collude': As AI Becomes Smarter, How to Define Safe Boundaries?
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Sam Altman's Bitcoin Life Insurance Raises 6 Billion Yen, Demand Grows Among Wealthy
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:[email protected]
VIP Program:[email protected]
