Malicious code embedded in open-source packages compromised the dYdX cryptocurrency exchange, leading to the theft of user wallet credentials and, in some cases, backdoored devices, according to security researchers. The compromised packages, published on the npm and PyPI repositories, affected applications using specific versions of the dydxprotocolv4-client-js package, resulting in complete wallet compromise and irreversible cryptocurrency theft, as reported by security firm Socket on Friday.
The attack targeted both developers testing with real credentials and production end-users. The affected versions of the dydxprotocolv4-client-js package were 3.4.1 and 1.22.1. The scope of the attack included all applications depending on the compromised versions.
In other news, crypto prices experienced a significant downturn this week, with Bitcoin falling nearly $15,000 in a 24-hour period. While Bitcoin has since recovered some of those losses, trading around $70,000 on Friday, the sudden drop left many in the crypto community questioning the cause. One theory, proposed by Parker White, former equities trader and current COO at DeFi Development Corporation, suggests the crash was triggered by high-leverage Bitcoin bets placed by Hong Kong traders that went awry.
Meanwhile, Anthropic's newest AI model, Claude Opus 4.6, demonstrated an ability to identify security vulnerabilities in open-source software. According to a report from the company's Frontier Red Team, the model discovered over 500 previously unknown zero-day vulnerabilities across open-source software libraries during testing. The model was not explicitly instructed to search for these flaws, but rather detected and flagged them independently.
In unrelated news, a suicide bombing at a Shiite mosque on the outskirts of Islamabad, Pakistan, claimed the lives of at least 31 people and injured at least 169 others during Friday prayers, according to officials. The attack, a rare occurrence in Pakistan's capital, occurred as the government struggles to contain a surge in militant attacks across the country.
Discussion
AI Experts & Community
Be the first to comment