- China-based hackers posing as a fake security firm stole $7M in crypto via wallet supply-chain attacks.
- A whistleblower leak exposed the operation after an internal profit dispute.
A Chinese hacker collective has been charged with stealing about $7 million in cryptocurrency by using supply-chain attacks to target users of cryptocurrency wallets. According to reports, the group claimed to be a security services provider while operating under the name Wuhan Anshun Technology. On the other hand, members were allegedly conducting illicit operations to pilfer cryptocurrency assets. Wallets like Trust Wallet and other platforms are thought to have been targeted by the attackers.
How the Group works
The group works by using malicious browser extensions and compromised Electron-based apps with remote access tools. They helped collect wallet information and transfer funds. It mainly targeted blockchains such as Ethereum, BNB Chain, and Arbitrum.
The details of the operation came out after a member of the group leaked information. The person claimed there was a disagreement over profit sharing and unpaid compensation. After the disagreement, the individual reportedly released evidence of the operation and said they plan to surrender to authorities. Authorities have not officially confirmed the case, and no formal investigation details have been released so far.
This incident demonstrates that the software and tools used with the wallets are also risky. Experts advise exercising caution when updating software and refraining from installing unknown updates. The case highlights growing risks in crypto security, even though the claims have not yet been verified.
Highlighted Crypto News:
Juliana Stratton Defeats Crypto-Backed Krishnamoorthi in Illinois Senate Primary
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
CoW Swap Issues Security Alert After Frontend Attack Detected by Blockaid
Blockaid has identified a frontend attack on CoW Swap, marking its domain as malicious. Users are advised to cease interactions, revoke wallet authorizations, and await further updates from the CoW Swap team.
GateNews1h ago
The Ethereum Foundation uses it too! The CoW Swap frontend was hacked, and DeFi leaders advise revoking approvals
The Ethereum DeFi platform CoW Swap experienced DNS hijacking on April 14, which may put users at risk of phishing. Although the protocol itself was not compromised, the risk of frontend attacks remains high. The industry recommends that users revoke approvals before taking any future actions. CoW Swap offers batch transaction functionality and protects against MEV attacks, and its security incident may affect the entire DeFi ecosystem.
ChainNewsAbmedia2h ago
Cowswap Frontend Under Attack, Users Urged to Revoke Permissions
Blockaid's security system detected a frontend attack on Cowswap, flagging the website COW.FI as malicious. Users are urged to revoke wallet permissions and refrain from interacting with the DApp.
GateNews5h ago
Polymarket reviews and weeds out early-stage projects in its ecosystem, targeting insider trading and market manipulation behaviors
Polymarket announced an audit of some of the onboarded startup projects that have been accused of using allegedly insider trading account information to steer users into making trades. The move is intended to strengthen compliance management and address external concerns about the risks of insider trading.
GateNews7h ago
In Q1 2026, Web3 projects suffered losses of over $460 million from hacks and scams, with phishing attacks leading the way.
Hacken’s report shows that in the first quarter of 2026, Web3 projects lost $464.5 million due to hacker attacks and scams, with phishing and social engineering attacks accounting for $306 million in losses. In addition, hardware wallet scams accounted for the bulk of the losses. Moreover, losses were also significant due to smart contract vulnerabilities and access control failures. In terms of regulation, the European legal framework has increased security monitoring requirements.
GateNews11h ago
RAVE’s hype surge triggers a flood of copycat coin mania, as FF and INX expose the “pump-and-dump” scheme
Recently, altcoins represented by RAVE have sparked a fierce investment craze, but some old star projects like FF and INX have used this wave of hype to carry out “pump-and-dump” operations—rapidly driving up coin prices to lure retail investors to buy, and then dumping them heavily, causing the price to plunge rapidly. Such behavior not only exposes the project team’s funding difficulties, but also damages investors’ trust. Investors need to stay alert to signals like abnormal short-term surges in order to avoid the risk of being manipulated by the market.
MarketWhisper15h ago
