Crypto on CuraSechttps://curasec.metacog.co.kr/tags/crypto/Recent content in Crypto on CuraSecHugoen-usTue, 28 Jul 2026 13:01:43 +0000Apple sued over fake crypto wallet app stealing $1.8M in Bitcoinhttps://curasec.metacog.co.kr/insights/2026-07-28-apple-sued-over-fake-app-store-crypto-wallet-app-stealing-1/Tue, 28 Jul 2026 13:01:43 +0000https://curasec.metacog.co.kr/insights/2026-07-28-apple-sued-over-fake-app-store-crypto-wallet-app-stealing-1/<ul> <li><strong>Engineer — Skip</strong></li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Learn:</strong> A lawsuit claiming Apple failed to prevent a fraudulent app from reaching consumers highlights platform vetting risk; useful context if your organization relies on mobile app stores for software distribution or if customers use your brand name in mobile apps.</li> </ul>Hackers steal $23.7M from Ostium via off-chain infrastructure compromisehttps://curasec.metacog.co.kr/insights/2026-07-21-hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chai/Tue, 21 Jul 2026 12:43:35 +0000https://curasec.metacog.co.kr/insights/2026-07-21-hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chai/<ul> <li><strong>Engineer — Learn:</strong> The attack exploited off-chain price-feed infrastructure to manipulate a DeFi protocol — a useful design-level lesson for anyone building systems that trust external data pipelines (oracles, webhooks, enrichment feeds) without integrity controls. No patch available; review data-ingestion trust boundaries.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Skip</strong></li> </ul>Study: 85 Crypto Wallet Browser Extensions Leak Addresses, Enable Trackinghttps://curasec.metacog.co.kr/insights/2026-07-15-study-of-85-crypto-wallet-extensions-finds-address-leaks-and/Wed, 15 Jul 2026 12:11:39 +0000https://curasec.metacog.co.kr/insights/2026-07-15-study-of-85-crypto-wallet-extensions-finds-address-leaks-and/<ul> <li><strong>Engineer — Learn:</strong> Research exposes a class of extension-level data leakage — wallet extensions correlating addresses and enabling cross-site tracking — worth considering when evaluating browser extension risk in enterprise environments or building wallet-adjacent tooling, but no patch or configuration action is available from this study.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Skip</strong></li> </ul>