Recent cybersecurity incidents have targeted cryptocurrency users through data breaches and phishing attacks. A Coinbase data breach has led to victims receiving scam mail, including fake postal letters claiming to offer credit protection services related to the breach. Users are advised to remain vigilant against requests for cash or cryptocurrency and to report scams to relevant authorities. Additionally, a phishing attack on the Hyperliquid platform has compromised over 1,200 addresses in the past 60 days. This attack involves a single malicious signature that upgrades an externally owned account (EOA) to a one-of-one multisignature wallet controlled solely by the attacker, granting full access to the victim's assets. Users of Hyperliquid and HyperEVM are urged to verify their account signatures carefully to avoid unauthorized asset transfers. These developments highlight ongoing risks in the cryptocurrency ecosystem from increasingly sophisticated scams and phishing techniques.
[deleted & reposted to clarify it's a phishing attack, NOT a hack] In the last 60 days, a phishing attack has compromised 1200+ addresses on Hyperliquid The phishing attack works with a single signature that upgrades the EOA to a 1 of 1 multisig with the attacker as the only https://t.co/rLmusyetLU
PSA this is a phishing attack & not a hack per se I should not have used the word "hack" It's a new type of phishing signature thanks to Hyperliquid's multisig primitive but ultimately just phishing If you read signatures before you sign them & have never signed a malicious https://t.co/OQi9CBaptO
Don't EVER blind sign anything. If you've used HyperEVM, double check that your address hasn't been "upgraded" to a 1/1 multisig with the hacker's wallet as signer - otherwise all your assets could be drained from Hyperliquid. The change can be made with a single malicious sig