Ethersphere security incident history
Hacking, data breaches and other security incidents involving Ethersphere, with related coverage.
Incidents: 1 · Most recent
Wallet-stealing malware injected into official Ethersphere releases
Ethersphere's automated release process was compromised, and malware was injected into bee-js 13.3.0 and Swarm Desktop 0.56.2. The attacker used stolen release automation credentials to distribute malicious versions through legitimate npm releases and desktop update channels. The malware was designed to steal wallet keys and passwords and install backdoors on Windows, macOS, and Linux, while the extent of actual infections and asset theft remains unknown.
Related reports: 5 · last report →