Crypto Security in Crisis Amid AI Proliferation: Multiple Projects Attacked Within a Week, Third-Party Dependencies and Personnel Risks Emerge as Major Vulnerabilities

BlockBeats news, October 28 — With the widespread use of AI tools in code auditing, vulnerability discovery, and automated attack script generation, the barrier to attacks in the crypto space has significantly lowered. The window from vulnerability discovery to exploitation has shortened, and weak links in supply chains, third-party components, and personnel levels are being exposed more efficiently. This week, multiple project security incidents occurred in close succession, with third-party dependency and operational permission issues particularly prominent.

The internal data breach previously disclosed by Coinbase continues to have ongoing impact. Attackers bribed overseas outsourced customer service personnel to obtain sensitive data of approximately 69,000 users, including names, addresses, phone numbers, emails, some ID document images, as well as account balances and transaction histories. The attackers subsequently demanded $20 million in ransom, which the company refused. Officials have clearly stated that user passwords, private keys, and funds themselves were not directly stolen, but the leaked data was used for subsequent phishing and social engineering attacks. The company estimates overall response costs in the hundreds of millions of dollars and continues to cooperate with law enforcement to pursue accountability.

Solana trading automation platform Bloom officially confirmed a security incident on October 26. Attackers exploited a complex remote code execution vulnerability in a third-party module to steal approximately 9,408 SOL (about $947,000) from 49 wallet addresses of 9 users. Officials have clearly stated that user private keys were not accessed or leaked, other wallets are safe, and the platform has committed to and completed 100% full compensation.

Indian trading platform CoinDCX confirmed losses of approximately $15.99 million. The funds came from old wallets that had been claimed to be retired after a previous hack incident, and were stolen due to deposit accumulation caused by a malfunction in the automatic sweeping service. The company stated the losses were absorbed by itself. Officials had previously called related reports false alarms before formally acknowledging them, and phishing campaigns targeting users also appeared during the same period.

BNB Chain prediction market MYRIAD experienced an internal operational wallet exploitation incident on October 26. Attackers used private keys leaked weeks earlier due to a third-party library vulnerability to manipulate the settlement results of 10 markets. The team quickly revoked permissions, and the attackers failed to withdraw funds. The relevant markets have been invalidated and refunds processed.

In addition, DotSwap V1 was exploited for approximately 8.5 BTC around October 25 through a legacy server-side signature path vulnerability; NGRAVE, a hardware wallet manufacturer, has recently continued to issue security reminders after its companion app's third-party push notification service was hijacked, with forged alerts inducing users to enter seed phrases and causing losses of over $2.56 million. Officials emphasized that the hardware wallet itself was not compromised; Keystone confirmed its website was breached, with customer records and device verification keys leaked, and plans to destroy nearly 19,000 inventory devices.