Several Twitter users have reported their accounts being compromised, with hackers using these accounts to send direct messages (DMs) directing followers to fraudulent Telegram accounts. Users such as Ryan Girdusky, Anshul Dhawan, and Pascal Canfin have warned their followers to ignore any unsolicited messages from their accounts. In a separate incident, the ALEX application, part of the Stacks ecosystem, experienced a security breach. The Stacks chain and sBTC protocol remain unaffected, but the ALEX team is working to isolate the attacker's movements and recover funds. Other platforms within the Stacks ecosystem, including Zest Protocol and Bitflow, have confirmed that their services and user funds are secure. Additionally, a new attack vector has been identified on Hyperliquid, where a hacker can upgrade an Ethereum address to a 1 of 1 multisig with a single signature, leading to an immediate upgrade and giving them full access to the victim's assets. Over 1200 addresses have been compromised using HyperEVM. Users are advised to check their addresses and avoid blind signing transactions.
Don't EVER blind sign anything. If you've used HyperEVM, double check that your address hasn't been "upgraded" to a 1/1 multisig with the hacker's wallet as signer - otherwise all your assets could be drained from Hyperliquid. The change can be made with a single malicious sig
PSA: @HyperliquidX traders and users be aware of this new attack vector on Hyper Liquid. https://t.co/jzlS1syxeb
URGENT: In the last 60 days, a hacker has compromised 1200+ addresses on Hyperliquid The hack works with a single signature that upgrades the EOA to a 1 of 1 multisig with the hacker as the only signer The upgrade is immediate & gives the hacker full access to all of their https://t.co/sFaT4EAq7g https://t.co/wdDMDV18E1