A fake wallet verification prompt briefly appeared on the homepage of CoinMarketCap, a cryptocurrency data aggregator, on Saturday.
The front-end exploit was traced to malicious code embedded in a homepage image, triggering a security investigation and warnings for users not to connect their wallets.
“Do not connect your wallet,” the company warned in its initial post on X.
The surprise homepage prompt quickly raised alarms, and wallet providers like MetaMask and Phantom reportedly flagged the site as suspicious.
CoinMarketCap later confirmed that the pop-up originated from a corrupted homepage doodle image that triggered a rogue API call.
The company said it removed the malicious code, identified the root cause, and deployed “comprehensive measures” to prevent further issues.
“We can confirm all systems are now fully operational,” it said in its latest update.
It’s not the first time the Binance-owned platform has faced security issues.
In 2021, more than three million email addresses linked to CoinMarketCap accounts appeared on hacking forums.
While the company said its servers weren’t breached, it acknowledged a correlation with its subscriber base.
The incident also taps into a growing fear among crypto users: their own mistakes.
A recent Kraken survey found that nearly half of respondents worry more about making a security error themselves than falling victim to hackers.
Crypto market movers
Bitcoin has lost 1.1% in value over the past 24 hours and is trading at $103,560.Ethereum is down 3.8% in the same period to $2,425.
What we’re reading
Joe Lubin just became Ethereum’s top champion. Just don’t call him ‘Mr. Saylor of ETH’ ― DL NewsTron Is Now More Expensive Than Ethereum. Will That Hurt Justin Sun’s New Company? ― UnchainedTop 7 public companies holding SOL — Milk RoadStablecoins will be ‘once in a generation’ shift if Genius Act becomes law, crypto leaders say ― DL News
