VERDICT —OUT OF SCOPE
Root cause is a frontend / UI hijack — users authorized the malicious transaction from a compromised site or DNS. On-chain contract was not the failure surface; pre-deployment audit cannot catch this class.
▰ METHOD
FRONTEND
FRONTEND
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Forensic narrative
According to monitoring by Scam Sniffer, the front end of CoinTelegraph has been hacked—exercise caution. Reportedly, clicking the CoinTelegraph website triggers a pop-up containing “airdrop” information that cannot be closed within the page. Attack method (per SlowMist): Frontend Attack. Reported loss: -.
Sourced from
slowmist
Technical record
- chain
- —
- protocol
- CoinTelegraph
- bug_class
- frontend
- date_occurred
- 2025-06-23
- loss_usd
- —
- source_id
- sm:cointelegraph::2025-06-23
Related — same bug class· frontend