CoinMarketCap has taken down a fake popup that was prompting users to \u201cverify\u201d their crypto wallets\u2014a move many quickly flagged as a phishing attempt, as reported by Cointelegraph. The alert appeared on the site on Friday and was removed within a few hours, the company said in a post on X.<\/p>\n
\u201cWe\u2019ve identified and removed the malicious code from our site,\u201d the post read<\/a>. The team added that it\u2019s still investigating the incident and plans to improve its security.<\/p>\n The popup led to a wave of warnings across social media, with crypto users urging others not to click on anything suspicious. Many described the message as a classic wallet phishing trick\u2014an attempt to get users to share private keys or approve actions that drain their funds.<\/p>\n These kinds of scams often show up as urgent prompts\u2014giveaways, airdrops, or wallet verification requests\u2014designed to look like they\u2019re from known crypto brands or influencers. Scammers either hijack verified accounts or create convincing fakes<\/a>. Then, they post links that lead users to fake login pages or smart contract approval windows.<\/p>\n One user on X flagged a fake $SONIC airdrop on May 29 and warned others not to interact with the link. Posts like these tend to look real, especially when they come from familiar names or use near-identical URLs. A single click or approval can hand control of a wallet over to the attacker.<\/p>\n Another crypto user, Auri, said the CoinMarketCap popup asked people to connect their wallet, then prompted approvals for ERC-20 tokens. That\u2019s often how scammers gain access to user funds without needing a password or seed phrase.<\/p>\n Users reported that MetaMask and Phantom\u2014two popular digital wallets\u2014had already flagged the CoinMarketCap site as unsafe during the incident. Phantom browser extensions began showing a warning that the site was not secure.<\/p>\n At the time of writing, CoinMarketCap hasn\u2019t provided further technical details about how the code was injected or whether user data was affected. It\u2019s also not clear how many users interacted with the popup before it was removed.<\/p>\n The situation raised concerns partly because this isn\u2019t the first security issue for CoinMarketCap. In 2021, the platform was breached, and more than 3.1 million email addresses were leaked. That data was later found circulating on hacking forums, as confirmed by Have I Been Pwned.<\/p>\n Phishing continues to be a major threat in crypto. Blockchain transactions are fast and final. Once assets are moved, there\u2019s no way to recover them. Many people also use hot wallets\u2014browser-connected wallets that are easier to use but also more exposed to scams.<\/p>\n The rise of NFTs and DeFi projects has added new entry points for attackers. Approving a malicious smart contract\u2014sometimes disguised as a normal transaction\u2014is all it takes for a wallet to be emptied. And because these attacks often mimic official websites and messages, even experienced users can fall for them.<\/p>\n CoinMarketCap has reminded users not to connect their wallets unless they\u2019re sure a site or popup is legit. For now, the company says its security team is still reviewing the issue.<\/p>\n (Photo by Mika Baumeister<\/a>)<\/em><\/p>\n See also: Crypto licences divide EU regulators<\/a><\/strong><\/p>\nPhishing scams are getting harder to spot<\/h3>\n
Wallet extensions respond quickly<\/h3>\n
Why crypto users remain high-risk targets<\/h3>\n
![\"\"\/](\"https:\/\/blockchaintechnology-news.com\/wp-content\/uploads\/2022\/12\/blockchain-expo-world-728-x-90-01.png\")