A newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets. Cybersecurity researchersA newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets. Cybersecurity researchers

Second JavaScript Exploit in Four Months Exposes Crypto Sites to Wallet Drainers

A newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets.

Cybersecurity researchers have reported a surge in malicious code uploaded to legitimate websites through a vulnerability in the popular JavaScript library React — a tool used by countless crypto platforms for their front-end systems.

Crypto Drainer Attacks Surge via React Flaw

According to Security Alliance (SEAL), a nonprofit cybersecurity organization, criminals are actively exploiting a recently disclosed React vulnerability labeled CVE-2025-55182.

“We are observing a big uptick in drainers uploaded to legitimate crypto websites through exploitation of the recent React CVE,” SEAL stated on X (formerly Twitter). “All websites should review front-end code for any suspicious assets NOW.

  • HP CEO “Exposes” Ink Cartridge Vulnerability Triggering Legal Storm
  • Exness Rewards Up to $10,000 in New Bug Bounty Program
  • How to Increase Business Security Using a Honeypot

The flaw enables unauthenticated remote code execution, allowing attackers to secretly inject wallet-draining scripts into websites. The malicious code tricks users into approving fake transactions via deceptive pop-ups or reward prompts.

Read more: Hackers Exploit JavaScript Accounts in Massive Crypto Attack Reportedly Affecting 1B+ Downloads

SEAL cautioned that some compromised sites may be unexpectedly flagged as phishing risks. The organization advised web administrators to conduct immediate security audits to catch any injected assets or obfuscated JavaScript.

"If your project is getting blocked, that may be the reason. Please review your code first before requesting phishing page warning removal. The attack is targeting not only Web3 protocols! All websites are at risk. Users should exercise caution when signing ANY permit signature."

Phishing Flags and Hidden Drainers

The group warned that developers who find their projects mistakenly blocked as phishing pages should inspect their code first before appealing the warning.

The React development team confirmed on December 3 that it had patched the vulnerability after white hat hacker Lachlan Davidson privately reported the issue.

The fix affects the react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack packages. The team urged all developers using these components to update immediately.

Market Opportunity
MetaDOS Logo
MetaDOS Price(SECOND)
$0.0000038
$0.0000038$0.0000038
0.00%
USD
MetaDOS (SECOND) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact [email protected] for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

Crypto Shows Mixed Reaction To Rate Cuts and Powell’s Speech

Crypto Shows Mixed Reaction To Rate Cuts and Powell’s Speech

The post Crypto Shows Mixed Reaction To Rate Cuts and Powell’s Speech appeared on BitcoinEthereumNews.com. Jerome Powell gave a speech justifying the Fed’s decision to push one rate cut today. Even though a cut took place as predicted, most leading cryptoassets began falling after a momentary price boost. Additionally, Powell directly addressed President Trump’s attempts to influence Fed policy, claiming that it didn’t impact today’s decisions. In previous speeches, he skirted around this elephant in the room. Sponsored Sponsored Powell’s FOMC Speech The FOMC just announced its decision to cut US interest rates, a highly-telegraphed move with substantial market implications. Jerome Powell, Chair of the Federal Reserve, gave a speech to help explain this moderate decision. In his speech, Powell discussed several negative economic factors in the US right now, including dour Jobs Reports and inflation concerns. These contribute to a degree of fiscal uncertainty which led Powell to stick with his conservative instincts, leaving tools available for future action. “At today’s meeting, the Committee decided to lower the target range…by a quarter percentage point… and to continue reducing the size of our balance sheet. Changes to government policies continue to evolve, and their impacts on the economy remain uncertain,” he claimed. Crypto’s Muted Response The Fed is in a delicate position, balancing the concerns of inflation and employment. This conservative approach may help explain why crypto markets did not react much to Powell’s speech: Bitcoin (BTC) Price Performance. Source: CoinGecko Sponsored Sponsored Bitcoin, alongside the other leading cryptoassets, exhibited similar movements during the rate cuts and Powell’s speech. Although there were brief price spikes immediately after the announcement, subsequent drops ate these gains. BTC, ETH, XRP, DOGE, ADA, and more all fell more than 1% since the Fed’s announcement. Breaking with Precedent However, Powell’s speech did differ from his previous statements in one key respect: he directly addressed claims that President Trump is attacking…
Share
BitcoinEthereumNews2025/09/18 09:01
Vitalik Buterin Reveals Ethereum’s Long-Term Focus on Quantum Resistance

Vitalik Buterin Reveals Ethereum’s Long-Term Focus on Quantum Resistance

TLDR Ethereum focuses on quantum resistance to secure the blockchain’s future. Vitalik Buterin outlines Ethereum’s long-term development with security goals. Ethereum aims for improved transaction efficiency and layer-2 scalability. Ethereum maintains a strong market position with price stability above $4,000. Vitalik Buterin, the co-founder of Ethereum, has shared insights into the blockchain’s long-term development. During [...] The post Vitalik Buterin Reveals Ethereum’s Long-Term Focus on Quantum Resistance appeared first on CoinCentral.
Share
Coincentral2025/09/18 00:31
World Bank backs Turkish women and youth with SME funding

World Bank backs Turkish women and youth with SME funding

The World Bank is to fund a new scheme to promote employment and economic empowerment for Turkish small scale enterprises, with a special emphasis on loans to women
Share
Agbi2025/12/17 16:34