Comment by 1a527dd5

13 hours ago

Related?

https://ohey.ca/research/polymarket-debugbear-wallet-drainer...

https://x.com/DebugBear/status/2115866496643535293

I don't think so. Both happened the same time but unrelated. Just a good haul for hackers end of the year.

If there were only a way to pin external deps loaded from html by sha…

  • That's not much help if you don't vet all third-party dependencies closely, ideally at the source level pre obfuscation/minification.

Who loads foreign JS from a CDN into a site handling finances? WTF, the crypto world always manage to make me speechless.