Slow Fog CISO: The Coinbase Commerce asset recovery page sitemap also has flaws, posing a phishing attack risk
By: www.chaincatcher.com|03/19/2026 04:42:00
0
Share
Prefer us on Google
After Slow Mist founder Yu Xian disclosed that the Coinbase Commerce asset recovery page directly requires users to enter plaintext mnemonic phrases, Slow Mist's Chief Information Security Officer 23pds added that the sitemap of that page also has flaws, allowing malicious attackers to easily use tools like ResourcesSaver to download the frontend code and deploy similar websites.
If combined with similar domain names like Coinbase for phishing attacks, users can easily fall victim.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Court Blocks Stock Delisting Due to 'Procedural Violations'... Will It Apply to Coins? "It's Just Talk Until the Basic Law Comes Out"
The Treasury surprised with a debt buyback and the BCRA accelerated dollar accumulation: what it means for interest rates
After fears of a lack of liquidity due to Wednesday's auction, the Treasury's debt buyback compensated for the absorption of pesos and dissipated pressure on interest rates.
Park Se-yong, Co-founder of Fomo: "The Era of Trading All Assets in One App is Coming"
This Week's Macroeconomic Highlights: Fed's October Rate Hike Pause Expectations Rise, AI Sector Faces Divergence and Credit Risk Challenges
唐华斑竹 Analyzes the Current State of the Crypto Market, Advises Caution
U.S. Treasury Department's Survey Fails to Signal Debt Reduction, Bond Yields Rise with 10-Year Yield Back Above 5.12%
In a survey soliciting opinions from primary dealers, the Treasury asked about long-term Treasury buyback plans, how to improve buyback efficiency, timing of short-term debt issuance, and economic and financing outlook, but did not directly address reducing long-term bond supply. Some investors had ...
Unbanked, listed on the Tokyo Stock Exchange, discontinues cryptocurrency business for gold price-linked token 'Kinka' due to profitability issues
Safe crypto storage: where is the safest place to store cryptocurrency
The topic of safe crypto storage has come to the forefront again after the scandal surrounding Ledger: even large wallet manufacturers are not perceived by the crypto community as a source of absolute protection. Below is an analysis of five ways to store cryptocurrency, from the most risky to the m...
Cardano governance hits a wall as treasury reaches 91% cap
Cardano has 42.6 million ADA left under its treasury withdrawal limit, shaping new funding choices while existing grants support later milestones.
The RWA market on Solana grew from USD 700 million to USD 4.3 billion in one year
New whales boost Bitcoin after bear market, says Spanish analyst
Stablecoin remittances show 84% cost gap, but payout reliability varies
Stablecoins: Mastercard and BVNK Launch Fiat and Crypto Account, Stripe Targets 100 Countries with Its Cards
Mastercard and BVNK launch an account that combines fiat and stablecoins, while Stripe targets 100 countries for its stablecoin cards before the end of 2026.
How to Manage a Channel When Cryptocurrency Advertising is Banned in 2026
From September 1, 2026, cryptocurrency advertising in Russia will be subject to updated restrictions, making careful content presentation especially important for authors of thematic channels. Risks can arise not only from direct calls to purchase coins but also from commercial links, promo codes, r...
The session to annul the DNU allowing bitcoin contracts in Argentina failed
Only 18% of Uniswap v3 positions under $1,000 beat holding after gas, study finds
Bitquery’s Ethereum v3 study shows 18% of closed regular positions below $1,000 beat holding after gas. See what v4’s design changes.
Memecoins: 17 Days to Reach the Peak, One Year to Lose 95%!
Coin Metrics quantifies the life of memecoins: 17.2 days to reach their ATH, 370 days to lose 95% of their value, and only 3% returning to the peak.
Starknet Considers Separating from Ethereum to Become Quantum-Resistant
Bitcoin Directly or via an ETP in a Securities Account: What to Choose?
We explain how to choose between holding bitcoin directly or exposing yourself to it via ETPs in a regular securities account.
AMC's No Does Not Automatically Halt AMC Stock Tokens Abroad on Robinhood
Microsoft exposes how USDT-funded phishing network targeted 75,000 organizations
Microsoft targeted three cybercrime services selling phishing infrastructure for USDT and other payment methods in a global crackdown.
XRP Fails to Match Bitcoin and Ether's Success for Long-Term Holders: Why the Token Lags Behind the Market
XRP remains significantly below its historical peak from early 2018, while Bitcoin, Ether, and several other major crypto assets have managed to either refresh or substantially exceed their previous highs during this time. For investors who bought the token at the peak of the last major cycle, the s...
Fortitude sold $8.3 million in borrowed Zcash to fund its mining expansion
Fortitude’s disclosed ZEC loan and sale show how mining expansion can be financed without a new token purchase. New equipment also changes reward shares.
Bank of America: Still Expecting Rate Hike in October, Raises Forecast for Fed's Favorite Inflation Indicator
Study finds $188 billion in risky funds linked to crypto exchanges
Slow Mist's Cosine Warning: FOMO Web Bookmark Phishing Attack
Apple Releases Update to Fix Zero-Day Vulnerability in Cryptocurrency Wallets
GitHub updates security incident investigation: An employee's device was compromised, involving a contaminated VS Code extension
GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the m...
Echo Protocol confirms it has been attacked and suspends all cross-chain transactions
Echo Protocol announced that it is investigating a security incident affecting the Echo cross-chain bridge on Monad. During the investigation, all cross-chain transactions remain suspended.According to previous reports, market news indicated that Echo Protocol was hacked on Monad. The attacker minte...
Slow Fog CISO: Grok was alerted to an injection attack resulting in a $175,000 DRB anomaly transfer
The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged t...
Court Blocks Stock Delisting Due to 'Procedural Violations'... Will It Apply to Coins? "It's Just Talk Until the Basic Law Comes Out"
...
Contents
Latest articles
10/17/2026
10/16/2026
Latest coin listings on WEEX
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
