Hackers exploited a vulnerability in CoinMarketCap’s front-end system, using a seemingly harmless doodle image to inject malicious code that triggered fake wallet verification pop-ups across the site.
The breach, confirmed by CoinMarketCap, used its backend API to deliver a manipulated JSON payload that embedded JavaScript into the homepage according to blockchain security firm Coinspect Security.
STORY CONTINUES BELOW
On June 20, 2025, our security team identified a vulnerability related to a doodle image displayed on our homepage. This doodle image contained a link that triggered malicious code through an API call, resulting in an unexpected pop-up for some users when visited our homepage.…
Trending: Now We Know Why the Minnesota Assassin Story Disappeared Overnight
— CoinMarketCap (@CoinMarketCap) June 21, 2025
The script caused an unauthorized prompt instructing users to “Verify Wallet,”
Join the conversation!
Please share your thoughts about this article below. We value your opinions, and would love to see you add to the discussion!