Category ""
ADVERTISING
Hackers exploited a vulnerability in CoinMarketCap's front-end system by using a doodle image to inject malicious code. The code triggered fake wallet verification pop-ups across the site ...
CoinMarketCap was hacked on Friday after a malicious popup appeared on its website, urging users to "verify" their wallets. BTC $102,791.89-0.83%. ETH $2,288.18-5.82%. ... CoinMarketCap was hacked after a fake wallet verification popup appeared on its site, triggering phishing concerns.
The incident occurred nearly four years after CoinMarketCap was hacked in October 2021, resulting in the leak of over 3.1 million (3,117,548) user email addresses.
On June 20, 2025, CoinMarketCap, a leading cryptocurrency data platform, faced a serious security breach. Hackers exploited a vulnerability in the site’s front end, leading to fake “Verify Wallet” popups designed to steal users’ cryptocurrency funds.
A doodle image triggered harmful code, leading to a phishing-style wallet verification prompt. MetaMask and Phantom flagged the site, warning users not to connect their crypto wallets. On Friday, CoinMarketCap revealed on X that it had taken down a fraudulent pop-up that asked users to verify their crypto wallets.
Source: X; Phantom Alerts CoinMarketCap Hack. Meanwhile, many users on X suspected the pop-up was a phishing attempt, a common crypto scam where hackers trick victims into divulging personal data or private keys. Crypto sleuth Jameson Lopp highlighted the security issue, adding that the hackers are intending to drain the users’ crypto wallets.
CoinMarketCap has removed a malicious pop-up that was appearing on their site and trying to trick users into verifying their wallets. The issue happened on June 17 and CoinMarketCap took swift action and the crypto community is in an uproar. On X (formerly Twitter), CoinMarketCap warned users not to interact with the “Verify Wallet” pop-up.
This is CoinMarketCap’s second significant security compromise. The breach-monitoring service Have I Been Pwned discovered that over 3.1 million user email addresses were compromised in an October 2021 intrusion. These addresses then surfaced on hacker forums. source
CoinMarketCap experienced a brief security breach on June 20 that exposed its platform users to a fake wallet verification pop-up. The crypto data aggregator said the issue stemmed from malicious JavaScript embedded through a doodle image on its homepage. While no losses were reported, the incident ...
Source: CoinMarketCap X Handle. What Really Happened? The false popup resembled a normal verification message to crypto users and security observers of their accounts. Upon clicking, it would request people to link their wallet and grant permission to access ERC-20 tokens, a perilous action that would open doors to hackers stealing crypto assets.