BTC
$103,633.09
–
0.01%
ETH
$2,423.91
–
2.25%
USDT
$1.0004
+
0.03%
XRP
$2.1187
–
0.18%
BNB
$635.64
–
1.19%
SOL
$140.53
–
1.00%
USDC
$1.0001
+
0.02%
TRX
$0.2732
–
0.01%
DOGE
$0.1605
–
1.34%
ADA
$0.5764
+
0.11%
HYPE
$32.96
–
3.18%
WBT
$49.03
+
0.08%
BCH
$474.60
–
2.76%
SUI
$2.6399
–
2.85%
LINK
$12.53
–
1.71%
LEO
$8.9198
+
0.35%
XLM
$0.2419
–
0.65%
AVAX
$17.13
–
1.76%
TON
$2.9132
–
1.87%
SHIB
$0.0₄1118
–
2.10%
By Francisco Rodrigues|Edited by Aoyon Ashraf
Jun 21, 2025, 3:28 p.m.
- Hackers exploited a vulnerability in CoinMarketCap’s front-end system by using a doodle image to inject malicious code.
- The code triggered fake wallet verification pop-ups across the site, instructing users to “Verify Wallet” in a phishing tactic to gain access to their crypto holdings.
- CoinMarketCap’s team removed the pop-up shortly after discovery and has implemented measures to isolate and mitigate the issue.
Hackers exploited a vulnerability in CoinMarketCap’s front-end system, using a seemingly harmless doodle image to inject malicious code that triggered fake wallet verification pop-ups across the site.
The breach, confirmed by CoinMarketCap, used its backend API to deliver a manipulated JSON payload that embedded JavaScript into the homepage according to blockchain security firm Coinspect Security.
STORY CONTINUES BELOW
The script caused an unauthorized prompt instructing users to “Verify Wallet,” a phishing tactic aimed at tricking visitors into handing over access to their crypto holdings.
The blockchain security firm traced the attack to the platform’s rotating “doodles” feature, which allowed attackers to embed the malicious code without altering the site’s core infrastructure.
The pop-up was live for a short period before being removed by CoinMarketCap’s team.
“Upon discovery, we acted immediately to remove the problematic content,” CoinMarketCap said in a statement posted to social media. “Comprehensive measures have been implemented to isolate and mitigate the issue.”
CoinMarketCap has not disclosed how many users encountered the pop-up or whether any wallets were compromised.
Francisco is a reporter for CoinDesk with a passion for cryptocurrencies and personal finance. Before joining CoinDesk he worked at major financial and crypto publications. He owns bitcoin, ether, solana, and PAXG above CoinDesk’s $1,000 disclosure threshold.
