{"id":174118,"date":"2024-10-31T12:56:25","date_gmt":"2024-10-31T12:56:25","guid":{"rendered":"https:\/\/crypto-economy.com\/?p=174118"},"modified":"2024-10-31T12:56:29","modified_gmt":"2024-10-31T12:56:29","slug":"1inch-hit-by-supply-chain-attack-users-funds-and-data-at-risk-heres-what-to-know","status":"publish","type":"post","link":"https:\/\/crypto-economy.com\/1inch-hit-by-supply-chain-attack-users-funds-and-data-at-risk-heres-what-to-know\/","title":{"rendered":"1inch Hit by Supply Chain Attack! Users\u2019 Funds and Data at Risk \u2013 Here\u2019s What to Know"},"content":{"rendered":"<p style=\"text-align: justify\"><span data-preserver-spaces=\"true\">TL;DR<\/span><\/p>\n<ul style=\"text-align: justify\">\n<li><strong><span data-preserver-spaces=\"true\">1inch has fallen victim to a significant supply chain attack,<\/span><\/strong><span data-preserver-spaces=\"true\"> compromising its website and posing severe risks to users&#8217; funds and personal data.<\/span><\/li>\n<li><strong><span data-preserver-spaces=\"true\">The breach occurred via a compromise of Lottie Player&#8217;s content server<\/span><\/strong><span data-preserver-spaces=\"true\">, where hackers injected unauthorized scripts into websites using Lottie Player versions 2.0.5 and above.<\/span><\/li>\n<li><strong><span data-preserver-spaces=\"true\">Users are advised to avoid interactions with affected websites <\/span><\/strong><span data-preserver-spaces=\"true\"><span data-preserver-spaces=\"true\">until security issues are resolved and follow best practices for crypto wallet security to protect their assets.<\/span><\/span><br \/>\n<hr \/>\n<\/li>\n<\/ul>\n<p style=\"text-align: justify\"><strong><a class=\"editor-rtfLink\" href=\"https:\/\/defillama.com\/protocol\/1inch-network#information\" target=\"_blank\" rel=\"noopener\"><span data-preserver-spaces=\"true\">1inch <\/span><\/a><span data-preserver-spaces=\"true\">has fallen victim to a significant supply chain attack, compromising its website and posing severe risks to users&#8217; funds and <\/span><a class=\"editor-rtfLink\" href=\"https:\/\/crypto-economy.com\/private-keys-of-cryptocurrencies\/\" target=\"_blank\" rel=\"noopener\"><span data-preserver-spaces=\"true\">personal data<\/span><\/a><\/strong><span data-preserver-spaces=\"true\">. The breach, which also affected other platforms like TEN Finance, originated from malicious code injected into the Lottie Player frontend library, a widely-used animation tool. <\/span><!--more--><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">On Oct 30, 9:12 PM &#8211; 11:22 PM CET, 1inch dApp users may have encountered a malicious wallet connect and signature request.<\/p>\n<p>This signature allows an attacker to drain user&#39;s funds.<\/p>\n<p>Only the 1inch web dApp was affected; the 1inch Wallet, API, and protocols were never compromised.<\/p>\n<p>&mdash; 1inch (@1inch) <a href=\"https:\/\/twitter.com\/1inch\/status\/1851832307746742686?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">October 31, 2024<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p style=\"text-align: justify\"><span data-preserver-spaces=\"true\">This attack has raised alarms across the crypto community, highlighting the vulnerabilities in the supply chain of decentralized applications.<\/span><\/p>\n<h2 style=\"text-align: left\"><span data-preserver-spaces=\"true\">How the 1inch Attack Happened<\/span><\/h2>\n<p style=\"text-align: justify\"><strong><span data-preserver-spaces=\"true\">The breach occurred via a compromise of Lottie Player&#8217;s content server<\/span><\/strong><span data-preserver-spaces=\"true\">, where a harmful npm package was employed to spread modified code. <\/span><strong><span data-preserver-spaces=\"true\">Hackers injected unauthorized scripts into the front-end JSON files<\/span><\/strong><span data-preserver-spaces=\"true\"> of websites using Lottie Player versions 2.0.5 and above.<\/span><\/p>\n<p style=\"text-align: justify\"><span data-preserver-spaces=\"true\">This malicious code enables the compromised sites to perform unauthorized transactions, posing a severe threat to users&#8217; assets and data.<\/span><strong><span data-preserver-spaces=\"true\"> Reports from Blockaid indicate that the attack has been active for at least 12 hours<\/span><\/strong><span data-preserver-spaces=\"true\">, affecting multiple Web3 projects and front-facing sites.<\/span><\/p>\n<h2 style=\"text-align: left\"><span data-preserver-spaces=\"true\">Immediate Impact and Response<\/span><\/h2>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-full wp-image-174125\" src=\"https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2024\/10\/1inch.jpg\" alt=\"1inch Hit by Supply Chain Attack! Users\u2019 Funds and Data at Risk \u2013 Here\u2019s What to Know\" width=\"825\" height=\"300\" srcset=\"https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2024\/10\/1inch.jpg 825w, https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2024\/10\/1inch-300x109.jpg 300w, https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2024\/10\/1inch-768x279.jpg 768w\" sizes=\"(max-width: 825px) 100vw, 825px\" \/><\/p>\n<p style=\"text-align: justify\"><strong><span data-preserver-spaces=\"true\">As of now, no user wallets have been reportedly compromised<\/span><\/strong><span data-preserver-spaces=\"true\">, but the potential for unauthorized transactions remains high. Users are advised to avoid any interactions with the affected websites until the security issues are fully resolved.<\/span><\/p>\n<p style=\"text-align: justify\"><strong><span data-preserver-spaces=\"true\">The Lottie Player team has announced that they have pinpointed the source of the breach<\/span><\/strong><span data-preserver-spaces=\"true\"> and are currently taking steps to eliminate the compromised versions. However, the extent of the damage and the number of affected platforms could be much higher than initially reported.<\/span><\/p>\n<h2 style=\"text-align: left\"><span data-preserver-spaces=\"true\">Security Measures and Recommendations<\/span><\/h2>\n<p style=\"text-align: justify\"><span data-preserver-spaces=\"true\">In response to the attack, <\/span><strong><span data-preserver-spaces=\"true\">security firms like Blockaid have confirmed the injection of unauthorized scripts within the Lottie Player package<\/span><\/strong><span data-preserver-spaces=\"true\">. It is highly recommended that users refrain from linking their wallets or engaging with the impacted platforms until all security concerns have been completely addressed. <\/span><\/p>\n<p style=\"text-align: justify\"><span data-preserver-spaces=\"true\">Additionally, <\/span><strong><span data-preserver-spaces=\"true\">users should follow best practices for <\/span><a class=\"editor-rtfLink\" href=\"https:\/\/crypto-economy.com\/cryptocurrency-wallet\/\" target=\"_blank\" rel=\"noopener\"><span data-preserver-spaces=\"true\">crypto wallet<\/span><\/a><span data-preserver-spaces=\"true\"> security<\/span><\/strong><span data-preserver-spaces=\"true\">, such as using hardware wallets, enabling two-factor authentication, and regularly updating software to protect their assets.<\/span><\/p>\n<p style=\"text-align: justify\"><span data-preserver-spaces=\"true\">The 1inch supply chain attack underscores the importance of robust security measures and vigilance in the cryptocurrency space. As the investigation continues, users must stay informed and take necessary precautions to safeguard their funds and personal data.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>TL;DR 1inch has fallen victim to a significant supply chain attack, compromising its website and posing severe risks to users&#8217; funds and personal data. The breach occurred via a compromise of Lottie Player&#8217;s content server, where hackers injected unauthorized scripts into websites using Lottie Player versions 2.0.5 and above. Users are advised to avoid interactions &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"1inch Hit by Supply Chain Attack! Users\u2019 Funds and Data at Risk \u2013 Here\u2019s What to Know\" class=\"read-more button\" href=\"https:\/\/crypto-economy.com\/1inch-hit-by-supply-chain-attack-users-funds-and-data-at-risk-heres-what-to-know\/#more-174118\" aria-label=\"More on 1inch Hit by Supply Chain Attack! Users\u2019 Funds and Data at Risk \u2013 Here\u2019s What to Know\">Read more<\/a><\/p>\n","protected":false},"author":32,"featured_media":174126,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[102,84,74],"tags":[4620,4665,4708],"class_list":["post-174118","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-companies","category-news","category-featured","tag-blockchain","tag-dex","tag-hack"],"_links":{"self":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/174118"}],"collection":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/comments?post=174118"}],"version-history":[{"count":1,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/174118\/revisions"}],"predecessor-version":[{"id":174129,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/174118\/revisions\/174129"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/media\/174126"}],"wp:attachment":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/media?parent=174118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/categories?post=174118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/tags?post=174118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}