Ethereum Developers May Face Risks from Malicious Code Found in ETHcode Open Source Update
2025-07-11 10:44:36

Main Idea
Malicious code was discovered in an ETHcode update, posing security risks to Ethereum developers and highlighting vulnerabilities in open-source crypto projects.
Key Points
1. A GitHub pull request by an unknown user (Airez299) introduced malicious code into ETHcode, masked by a new testing framework.
2. The malicious code could potentially compromise Ethereum contracts under development, though no exploits have been reported yet.
3. ETHcode has approximately 6,000 installations, and its automatic update mechanism increases the risk of widespread impact.
4. Open-source vulnerabilities in crypto projects are a growing concern, with past incidents like the Ledger Connect Kit breach and Solana’s web3.js library malware.
5. ReversingLabs recommends developers adopt rigorous security practices, including sandboxing and strict protocols, to mitigate risks.
Description
Cybersecurity researchers have uncovered malicious code embedded in a recent update to ETHcode, a widely used open source toolset for Ethereum developers. The hidden code was inserted via a GitHub
Latest News
- Binance May Have Supported Trump-Backed USD1 Stablecoin Amid Ongoing Regulatory Discussions2025-07-11 17:14:52
- Binance’s Role in Creating and Promoting WLFI’s USD1 Stablecoin Faces Controversy Amid CZ’s Rebuttal2025-07-11 17:14:24
- BlockDAG’s 80% Unlock and $0.0016 Entry Position It as a Potential Leader Over XRP’s Bullish Momentum2025-07-11 17:12:35
- SharpLink Gaming Emerges as Second-Largest Ethereum Holder Following $30M Acquisition from Ethereum Foundation2025-07-11 16:59:49
- Bitcoin Price Analysis: Why Most Currencies Falling Short of ATH Signals Huge Growth Potential for Bitcoin2025-07-11 16:58:24