Ethereum Developer Hacked by Fake Extension on Cursor AI

Cole defined in an August 12 put up on X that the problem started when he added an extension referred to as “contractshark.solidity-lang” to his setup by way of Cursor AI.

This extension appeared protected, because it had an in depth description, a well-known icon, and had already been downloaded over 54,000 instances.

Do you know?

Need to get smarter & wealthier with crypto?

Subscribe – We publish new crypto explainer movies each week!

Sizzling VS Chilly Pockets: Which One Do YOU Want? (Animated)

Nevertheless, after set up, the software program quietly accessed Cole’s native surroundings file. Inside minutes, his non-public key was copied and despatched to another person.

The extension then allowed the attacker to entry Cole’s pockets for 3 days. On August 10, all of the funds in that pockets had been eliminated. Cole defined that he had been working to finalize a wise contract when he added the device, which led to the oversight.

Regardless of the breach, Cole didn’t lose a lot cash. He solely shops small quantities in simply accessible wallets used for testing, whereas his predominant property are protected with {hardware} units.

His investigation led him to reviews from cybersecurity sources like Kaspersky and BleepingComputer, which linked the identical extension to a bigger theft marketing campaign that has taken greater than $500,000 from completely different victims.

As of now, the extension remains to be accessible on Cursor AI’s market, and the writer stays listed as a trusted supply.

Koi Safety just lately reported {that a} cybercrime group named GreedyBear has stolen greater than $1 million in cryptocurrency. How? Learn the total story.