1inch and Multiple Platforms Compromised in Major Supply Chain Hack

A supply chain attack using the Lottie Player animation library has affected 1inch, TEN Finance, and other platforms, exposing users to unauthorized transactions and data risks.

In a significant security incident, a supply chain attack has compromised decentralized exchange aggregator 1inch, TEN Finance, and other platforms, posing serious risks to users’ funds and personal data. The attack, which was facilitated through malicious code in the popular Lottie Player animation library (versions 2.0.5 and above), enables unauthorized actions on affected sites. Users have been advised to refrain from interacting with these platforms until the issue is fully resolved.

The breach was discovered after security firm Blockaid reported malicious scripts within JSON files of the Lottie Player library. Attackers utilized corrupted npm packages on Lottie Player’s servers, allowing them to insert unauthorized code that bypasses debugging protocols. Even websites outside the crypto industry may be unknowingly serving compromised content due to this exploit.

Online advertising service 1lx.online

The 1inch platform has yet to issue an official statement, but Lottie Player’s team is actively working to replace compromised versions. This breach highlights a worrying trend of increased cyber threats targeting the crypto space. Recent high-profile hacks include $20 million stolen from the U.S. government in funds tied to the Bitfinex hackers and Radiant Capital’s $50 million loss due to a private key exploit.

With over $2.1 billion already stolen in crypto-related thefts this year, security concerns remain urgent for both centralized and decentralized platforms.

Our creator. creates amazing NFT collections! 
Support the editors - Bitcoin_Man (ETH) / Bitcoin_Man (TON)
Pi Network (Guide)is a new digital currency developed by Stanford PhDs with over 55 million participants worldwide. To get your Pi, follow this link https://minepi.com/Tsybko and use my username (Tsybko) as the invite code.
Binance: Use this link to sign up and get $100 free and 10% off your first months Binance Futures fees (Terms and Conditions).
Bitget: Use this link Use the Rewards Center and win up to 5027 USDT!(Review)
Bybit: Use this link (all possible discounts on commissions and bonuses up to $30,030 included) If you register through the application, then at the time of registration simply enter in the reference: WB8XZ4 - (manual)

Online advertising service 1lx.online

Comments

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept