ChainCatcher reports that, according to GoPlus monitoring, the account abstraction solution Holdstation has been targeted in a supply chain attack. The attacker stole developer session tokens, bypassed two-factor authentication, and injected malicious code into application updates, resulting in user funds being stolen.
The attack caused a total loss of 462,000 USDT. The attacker’s address is 0xcbfA60B39cfAeaE475f649fB6705bD477219bF8d. The Holdstation team has suspended services, pledged to fully compensate affected users, and is working with security teams to investigate the incident. They also posted a message on-chain, hoping to encourage the attacker to return the funds through a bug bounty program.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Man Alleges Wife Stole $172 Million in Bitcoin After 'Covertly Recording' Him
In brief
A now-estranged wife is alleged to have stolen $172 million in Bitcoin from her husband.
A court filing alleges that she used CCTV footage to obtain the seed phrase for a hardware wallet containing the Bitcoin.
After being warned of the potential theft, the husband set up
Decrypt1h ago
Venus Protocol Suspected of $3.7M Flash-Loan Attack
Key Takeaways:
An alleged exploit on Venus Protocol enabled a wallet to borrow about $3.7 million in crypto assets on the illiquid $THE token as security.
The speech had taken out BTCB, CAKE and WBNB and was put into liquidation as collateral value declined.
It is estimated that there is
CryptoNinjas7h ago
Israeli journalist faces death threats from prediction platform users for accurately reporting Iranian missile attack
An Israeli Times reporter faced harassment and death threats for accurately covering Iran's missile attack, with threateners attempting to coerce report modifications due to failed bets. The reporter has filed a complaint, stating commitment to professional ethics while expressing concern that others could be tempted.
GateNews10h ago
US, UK, and Canada Launch Operation Atlantic to Combat Crypto-Approval Phishing Scams
U.S., U.K., and Canadian law enforcement agencies jointly launched "Operation Atlantic" to combat "approval phishing" scams targeting cryptocurrency users. Cryptocurrency fraud is expected to generate nearly $17 billion in illicit proceeds in 2025. The operation aims to identify victims, alert potential victims, and trace stolen assets.
GateNews10h ago
GAIB Frontend Suffers Security Attack, Users Reminded to Pause Interactions
Gate News, March 16: AI infrastructure project GAIB announced that its front-end webpage is currently facing security issues, warning users not to interact with the site until further notice. GAIB emphasized that user funds and smart contracts remain secure and unaffected. The team stated that they are actively working to resolve the problem and will provide further updates once the website is fully restored.
GateNews10h ago
