A newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets. Cybersecurity researchersA newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets. Cybersecurity researchers

Second JavaScript Exploit in Four Months Exposes Crypto Sites to Wallet Drainers

A newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets.

Cybersecurity researchers have reported a surge in malicious code uploaded to legitimate websites through a vulnerability in the popular JavaScript library React — a tool used by countless crypto platforms for their front-end systems.

Crypto Drainer Attacks Surge via React Flaw

According to Security Alliance (SEAL), a nonprofit cybersecurity organization, criminals are actively exploiting a recently disclosed React vulnerability labeled CVE-2025-55182.

“We are observing a big uptick in drainers uploaded to legitimate crypto websites through exploitation of the recent React CVE,” SEAL stated on X (formerly Twitter). “All websites should review front-end code for any suspicious assets NOW.

  • HP CEO “Exposes” Ink Cartridge Vulnerability Triggering Legal Storm
  • Exness Rewards Up to $10,000 in New Bug Bounty Program
  • How to Increase Business Security Using a Honeypot

The flaw enables unauthenticated remote code execution, allowing attackers to secretly inject wallet-draining scripts into websites. The malicious code tricks users into approving fake transactions via deceptive pop-ups or reward prompts.

Read more: Hackers Exploit JavaScript Accounts in Massive Crypto Attack Reportedly Affecting 1B+ Downloads

SEAL cautioned that some compromised sites may be unexpectedly flagged as phishing risks. The organization advised web administrators to conduct immediate security audits to catch any injected assets or obfuscated JavaScript.

"If your project is getting blocked, that may be the reason. Please review your code first before requesting phishing page warning removal. The attack is targeting not only Web3 protocols! All websites are at risk. Users should exercise caution when signing ANY permit signature."

Phishing Flags and Hidden Drainers

The group warned that developers who find their projects mistakenly blocked as phishing pages should inspect their code first before appealing the warning.

The React development team confirmed on December 3 that it had patched the vulnerability after white hat hacker Lachlan Davidson privately reported the issue.

The fix affects the react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack packages. The team urged all developers using these components to update immediately.

Market Opportunity
MetaDOS Logo
MetaDOS Price(SECOND)
$0.0000045
$0.0000045$0.0000045
+18.42%
USD
MetaDOS (SECOND) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact [email protected] for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

Kalshi Jumps to 62% Market Share While Polymarket Eyes $10B Valuation

Kalshi Jumps to 62% Market Share While Polymarket Eyes $10B Valuation

The post Kalshi Jumps to 62% Market Share While Polymarket Eyes $10B Valuation appeared on BitcoinEthereumNews.com. Fintech 19 September 2025 | 16:03 Event-based trading platforms are no longer niche experiments – they’re emerging as a major arena where finance, crypto, and information converge. After months of subdued activity, volumes are climbing again, and U.S.-regulated Kalshi has unexpectedly taken the lead. Betting on Everything From Rates to Sports Analysts at Bernstein describe prediction markets as a new “interface for information,” where users speculate not only on sports results but also on Federal Reserve decisions, quarterly earnings, and even crypto price moves. This year alone, more than $200 million changed hands on Polymarket contracts linked to the Fed’s recent 25 bps rate cut, while $85 million traded on Kalshi around the same decision. Mainstream brokers like Coinbase and Robinhood are watching closely, with ambitions to capture some of the momentum. With U.S. sports betting already worth tens of billions annually, the overlap is too big to ignore. Against that backdrop, Kalshi has delivered one of its strongest months since the 2024 elections. The platform reports $1.3 billion in trading volume so far in September, accounting for 62% of global prediction market activity. Just a year ago, Kalshi’s share stood at 3%. CEO Tarek Mansour called the growth “remarkable,” noting that the exchange still serves only U.S. clients. Polymarket’s Pushback Its main rival, Polymarket, has logged about $773 million in trades this month. While that trails Kalshi for now, Polymarket has unique advantages: as a crypto-native platform, it has carved out strong global demand and is working toward a formal U.S. relaunch via its acquisition of derivatives exchange QCEX. The two platforms now stand as the clear leaders of the sector, though they embody different philosophies — one regulated from the ground up, the other built around decentralization. Investors Take Notice The boom hasn’t escaped venture capital. Reports suggest…
Share
BitcoinEthereumNews2025/09/19 21:34
Visa Expands USDC Stablecoin Settlement For US Banks

Visa Expands USDC Stablecoin Settlement For US Banks

The post Visa Expands USDC Stablecoin Settlement For US Banks appeared on BitcoinEthereumNews.com. Visa Expands USDC Stablecoin Settlement For US Banks
Share
BitcoinEthereumNews2025/12/17 15:23
Bitcoin Lightning Network Capacity Surges to Historic Peak as Exchange Adoption Accelerates

Bitcoin Lightning Network Capacity Surges to Historic Peak as Exchange Adoption Accelerates

The Bitcoin Lightning Network has reached an all-time high in total network capacity, marking a significant milestone for the layer-2 scaling solution designed to enable fast and inexpensive Bitcoin transactions. The surge comes as major cryptocurrency exchanges increasingly integrate Lightning functionality, bringing the technology to millions of users who previously relied solely on slower, more expensive on-chain transactions. This capacity expansion reflects growing confidence in Lightning's reliability and utility after years of development and real-world testing. What began as an experimental protocol discussed primarily among technical enthusiasts has matured into infrastructure that some of the industry's largest platforms now consider essential to their operations.
Share
MEXC NEWS2025/12/17 17:14