"The C2 hosts a web-based graphical user interface (GUI) titled 'NEXUS Listener' that can be used to view stolen information ...
The exploit did not involve a bug in Drift's code. It used "durable nonces," a legitimate Solana transaction feature, to ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...