Connect with us
DAPA Banner

Crypto World

Umbra privacy protocol blocks front-end to deter Kelp exploiters

Published

on

Crypto Breaking News

Privacy-preserving crypto protocol Umbra has pulled its front-end hosting offline in a bid to complicate misuse by hackers who have been moving funds from recent high-profile breaches. The move comes as Umbra disclosed that roughly $800,000 worth of stolen funds were routed through its protocol, a signal that attackers continue to exploit cross-chain bridges and related services despite ongoing security efforts.

In a post on X, Umbra said it had transitioned the hosted front end into maintenance mode and would bring it back online only when it can be done without disrupting recovery efforts. The team stressed that the decision was a precaution aimed at safeguarding the recovery process while acknowledging that the open-source nature of its front end means other implementations could still be used by malicious actors.

Key takeaways

  • Umbra paused its hosted front end to hinder attacker use, citing approximately $800,000 in stolen funds moved through its protocol.
  • The development follows a high-profile sequence of exploits, including the Kelp protocol breach that netted around $280 million, with investigators suspecting North Korean actors were involved.
  • Despite the suspension, Umbra emphasized that on-chain activity and self-hosted or locally deployed interfaces remain possible, underscoring the limits of front-end restrictions.
  • Analysts and commentators warn that front-end freezes alone may not satisfy regulators or prosecutors who view interface changes as indicative of broader control over a protocol.
  • Ambiguity persists about how to balance privacy objectives with anti-fraud and sanctions enforcement in decentralized systems.

Umbra’s action in a shifting security landscape

Umbra’s decision to take its front end offline highlights a growing debate about defensible responses when breaches spill over into the tooling that users rely on most. The targeted move aims to reduce the surface area hackers can exploit for money movement tied to the latest breaches, according to Umbra’s statement. The project noted that the protocol “protects the identity of the receiver, not the sender,” a distinction it says does not assist hackers trying to conceal fund trails. It also stressed that every stolen fund routed through its contracts can be identified, and that it has been collaborating with security researchers involved in the investigation.

In parallel, security researchers and industry observers have repeatedly warned that the tokenized services bridging assets across networks remain a common vector for theft. The Kelp breach, which saw illicit gains reach hundreds of millions of dollars, has intensified scrutiny of cross-chain activity and the ways in which attackers pivot across networks to move funds. PeckShield and other monitoring outfits have flagged Umbra as a target of interest for opportunistic attackers attempting to bridge stolen Ether into Bitcoin and other assets, underscoring the ongoing liquidity risk within the bridge ecosystem.

The front end debate: is a UI pause enough?

Roman Storm, a co-founder of the crypto mixer Tornado Cash, has argued that a temporary freeze on the front end may not be sufficient to placate authorities or deter illicit use. Storm’s comments reference his own legal battles over sanctions-related charges, where prosecutors characterized control over a protocol as equivalent to controlling its operations. He has argued that limiting user interfaces may be read as exerting influence over a broader system, raising questions about what constitutes meaningful control in decentralized architectures.

Advertisement

Umbra’s own note touched on this tension, noting that the protocol’s core remains usable through smart contracts and, in many cases, through self-hosted front ends. The company asserted that even if the hosted front end goes offline, attackers could still access the open-source components if they choose to deploy their own interfaces or use local deployments. The broader implication is that while operators can reduce risk through UI changes, the core protocol’s code and governance remain the ultimate locus of control—and the primary determinant of how funds move once a user interacts with the protocol on-chain.

Privacy versus enforcement: what changes for users and investigators?

Umbra’s framing of its front-end pause as a protective measure for recovery efforts reflects a nuanced approach to privacy-preserving design. The project reiterated that its technology is intended to protect recipient anonymity, rather than to obscure the sender’s trail. In practice, this means that investigators and security researchers can, with cooperation and the right tools, trace flows of stolen funds even when they pass through privacy-centric constructs. Umbra’s statement that all stolen funds can be identified when appropriate signals and data are available is consistent with ongoing industry norms that seek a balance between user privacy and fraud prevention.

For investors and builders, the incident reinforces a persistent theme in crypto: even advanced privacy protocols operate within a broader ecosystem where law enforcement, sanctions regimes, and compliance expectations shape what is feasible in practice. The ongoing sanctions regime targeting North Korean cyber actors adds a layer of regulatory risk to the activity around cross-chain platforms and mixers, as authorities increasingly couple enforcement actions with industry-wide stances against funding networks linked to sanctioned entities.

What to watch next

As recovery efforts continue, observers will be watching for updates on when and how Umbra will restore front-end access without compromising investigators’ ability to trace and recover funds. The episode also raises questions about the durability of privacy-first designs in the face of coordinated enforcement and incident response. Other protocols with similar privacy-centric aims may reassess their own front-end exposure, governance processes, and incident-response playbooks in light of Umbra’s experience.

Advertisement

In the near term, market participants should monitor whether other bridges and privacy-focused contracts adjust their public interfaces or deploy additional mitigations to reduce exploit risk. Regulators and prosecutors will likely keep a close eye on how developers balance user privacy with the need to curb illicit finance, particularly as high-profile attacks continue to test the resilience of cross-chain ecosystems.

Ultimately, the event underscores a core dynamic in the crypto security landscape: improvements in on-chain privacy and usability must be matched by robust off-chain collaboration, transparent communications, and adaptable incident response plans if communities are to navigate the evolving threat environment without stifling innovation.

readers should stay tuned for further disclosures from Umbra and for subsequent analyses from security researchers detailing how such vulnerabilities are being addressed and what this portends for the broader privacy-centric segment of DeFi.

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

North Korean-backed hackers roll out new attack vector targeting crypto executives and firms

Published

on

North Korean-backed hackers roll out new attack vector targeting crypto executives and firms

The North Korean state-run Lazarus Group is running a new campaign known as “Mach-O Man” that turns routine business communication into a direct path to credential theft and data loss, security experts warned Wednesday.

The collective, with cumulative loot estimated at $6.7 billion since 2017, is targeting fintech, cryptocurrency and other high-value executives and firms, Natalie Newson, a senior blockchain security researcher at CertiK, told CoinDesk on Wednesday.

In the past two weeks alone, the North Korean hackers have siphoned more than $500 million from the Drift and KelpDAO exploits in what appears to be a sustained campaign. The crypto industry needs to start viewing Lazarus the same way banks view nation-state cyber actors: “as a constant and well-funded threat, not just another news headline,” she said.

“What makes Lazarus especially dangerous right now is their activity level,” Newson said. “KelpDAO, Drift, and now a new macOS malware kit, all within the same month. This isn’t random hacking; it’s a state-directed financial operation running at a scale and speed typical of institutions.”

Advertisement

North Korea has turned crypto theft into a lucrative national industry, and Mach-O Man is just the latest product from that process, she said. While Lazarus created it, other cybercrime groups are also using it.

“It is a modular macOS malware kit created by Lazarus Group’s infamous Chollima division. It uses native Mach-O binaries tailored for Apple environments where crypto and fintech operate,” she said.

Newson said Mach-O Man uses a delivery method known as ClickFix. “It’s important to be clear because a lot of coverage is mixing up two separate things,” she noted. ClickFix is a social engineering technique where the victim is asked to paste a command into their terminal to fix a simulated connection issue.

It works by Lazarus sending executives an “urgent” meeting invite over Telegram for a Zoom, Microsoft Teams or Google Meet call, according to Mauro Eldritch, a security expert and founder of threat intelligence firm BCA Ltd.

Advertisement

The link leads to a fake, but convincing, website that instructs them to copy and paste one simple command into their Mac’s terminal to “fix a connection issue.” In doing so, the victims provide immediate access to corporate systems, SaaS platforms and financial resources. By the time they find out they were exploited, it is usually too late.

There are several variations of this attack, security threat researcher Vladimir S. said on X. There are already cases where Lazarus attackers have hijacked decentralized finance (DeFI) projects’ domains with this new malware by replacing their websites with a fake message from Cloudflare, asking them to enter a command to grant access.

“These fake ‘verification steps’ guide victims through keyboard shortcuts that run a harmful command,” said Certik’s Newson. “The page looks real, the instructions seem normal, and the victim initiates the action themselves — which is why traditional security controls often miss it.”

Most victims of this hack will not realize their security has been breached until the damage has been done, at which time, the malware will have already erased itself as well.

Advertisement

“They likely don’t know it yet,” she said. “If they do, they probably can’t identify which variant affected them.”

Source link

Continue Reading

Crypto World

Bitcoin Bull Score at 6-month high as 2022 bear-market fears linger

Published

on

Crypto Breaking News

Bitcoin is showing short-term relief in price and sentiment metrics, but investors should stay wary of a potential relapse into the 2022 bear-market dynamics. New data from on-chain analytics firm CryptoQuant suggests that Bitcoin’s Bull Score Index (BSI) has moved into neutral territory for the first time in this bear market, even as BTC tries to push toward fresh highs. At the same time, broader market mood appears to be firming, with the Crypto Fear & Greed Index climbing back from extreme fear, hinting at a cautious but improving backdrop for traders and holders.

Key points:

  • Bitcoin’s Bull Score Index has reached neutral territory (50) for the first time in this bear market, with BTC rallying toward $78,000.
  • CryptoQuant cautions that the relief could be transient, echoing the pattern seen earlier in March 2022 when neutral readings preceded renewed price declines.
  • The Crypto Fear & Greed Index has recovered to the 30s, marking the most bullish sentiment since January and signaling a shift, albeit from a still-fragile base.

Bitcoin Bull Score Index exits the “bearish” zone

CryptoQuant’s Bull Score Index, which aggregates nine price metrics to gauge overall momentum, shows Bitcoin entering neutral territory as the price tests the $78,000 level. This marks the first time the index has broken above the early-bear-market axis toward 50 since the downturn began. A CryptoQuant analyst highlighted the milestone in a recent post, noting that it represents a transition point rather than a signal of a lasting trend.

“First time in this bear market that the Bull Score Index enters neutral zone (50),” wrote Julio Moreno on X, underscoring that the shift is a notable, yet potentially fragile, moment. The caution mirrors a familiar pattern from the prior bear cycle, when the bull-score flickered into neutrality only to retreat as selling pressure resurfaced.

The historical context matters. In March 2022, the BSI briefly touched neutral territory for about a week before the price resumed its decline, reminding markets that a neutral reading does not guarantee sustained upside. As market participants monitor April’s monthly close, the key question remains whether BTC can sustain strength beyond a near-term range and break decisively out of a multi-month plateau noted by observers at times this year.

Advertisement

At present, traders are watching for catalysts that could lift the trajectory beyond the current range. CryptoQuant contributor Arab Chain described a balance in the near term, with price hovering around $74,000 and activity suggesting a tug-of-war between supply and demand. While the neutral reading of the BSI implies a more balanced dynamic than the steeply bearish readings of the past months, it does not remove the risk of renewed downside if demand cools or macro stress reasserts itself.

Sentiment steadies, though still cautious

Beyond on-chain momentum, sentiment indicators are painting a cautiously improving picture. The Crypto Fear & Greed Index has recovered to a reading of 32 out of 100, moving away from the previous week’s Extreme Fear readings near 23. Although still categorized in the Fear territory, this shift signals a softening of negative mood among market participants. The index has roughly tripled in a little more than a week, reflecting a notable swing in trader psychology amid the price action.

“This places the market in a transitional phase, as investors await new catalysts to determine the next direction.”

The Fear & Greed Index is a lagging measure that aggregates multiple factors to gauge overall investor mood. Its upward movement toward a neutral zone aligns with the improved technicals observed in the BSI and with reports that Bitcoin has regained some supply-demand balance in recent days. Still, the index remains below the level that would typically accompany strong bullish conditions, reinforcing the sense that a breakout remains uncertain and conditional on broader market drivers.

In addition to the fear-greed cycle, broader market commentary has cited the potential for renewed volatility tied to macro and sector-specific developments. Cointelegraph’s coverage this week highlighted the possibility of Bitcoin breaking out of a multi-month trading range, a development that would align with improving sentiment but could hinge on fresh liquidity, risk appetites, and systemic cues from traditional markets.

Advertisement

With BTC flirting with the $78,000 level and the BSI shifting into neutral territory, traders face a decision juncture. The immediate question is whether the balance between supply and demand can be maintained in the face of potential macro headwinds or if renewed selling pressure could reassert itself as the market digests upcoming catalysts.

Investors should pay particular attention to:

  • April monthly close: A decisive move above or below key thresholds could recalibrate market expectations and alter positioning among traders who use the BSI and sentiment signals to time entries and exits.
  • Resistance and liquidity dynamics: If the price breaks higher, traders will be watching for a sustained flow of bids and a shift in open interest that confirms conviction beyond a short-term squeeze.
  • Correlation with broader risk assets: As global risk appetite evolves, Bitcoin’s performance often tracks or diverges from equities and macro risk proxies, potentially amplifying moves around upcoming data releases or policy signals.

The evolving picture is a reminder that a neutral or even bullish signal in one metric does not erase risk. The 2022 bear episode began with a period of moderation before renewed declines; today’s readings suggest a transitional phase rather than a clear, enduring uptrend. For investors, the prudent approach remains to balance on-chain signals with macro awareness and to watch how fresh catalysts influence both price and sentiment in the weeks ahead.

As the market weighs these readings, the next moves in Bitcoin will be closely watched by traders, institutions, and developers alike. Whether this neutral tilt is a prelude to a sustainable rally or a temporary pause before further volatility remains an open question, but the current data clearly signal a shift away from the most bearish extremes toward a more balanced, if fragile, footing.

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Advertisement

Source link

Continue Reading

Crypto World

PEPE surges 4% as market sentiment improves, eyes Key resistance breakout

Published

on

A bullish PEPE chart
A bullish PEPE chart

Key takeaways

  • Pepe extends gains on Wednesday, stretching its rally from the 50-day EMA.
  • Derivatives data show heightened retail activity as risk-on sentiment returns to the market.

Pepe (PEPE) is experiencing a steady rally on Wednesday, trading in the green for the third consecutive day. The frog-themed meme coin is gaining traction as broader market sentiment improves, lifting retail demand for meme coins.

Market sentiment boosts meme coin demand

The broader market’s upside, despite ongoing geopolitical tensions surrounding the US-Iran blockade of the Strait of Hormuz and faltering peace talks, is boosting retail interest in meme coins. 

According to CoinMarketCap, the Fear and Greed Index is at 62 on Wednesday, showing a consistent rise in risk appetite since the US-Iran ceasefire announcement.

On the derivatives side, the PEPE futures Open Interest (OI) stands at $213.25 million, with a 7% increase in the last 24 hours. 

Advertisement

This surge in futures positions indicates growing participation from traders, aligning with the recovery in the spot price—further supporting a bullish outlook for PEPE.

Pepe tests breakout of key resistance level

The PEPE/USD 4-hour chart is bullish and efficient as Pepe’s short-term recovery remains intact, with a three-day rebound from the 50-day Exponential Moving Average (EMA) at $0.00000368.

However, PEPE is still trading below the 100-day and 200-day EMAs, which could cap the ongoing rally.

The Relative Strength Index (RSI) at 60 is edging higher from the midline, indicating mild positive momentum. Meanwhile, the Moving Average Convergence Divergence (MACD) remains above its signal line, keeping the histogram bars positive.

Advertisement

At press time, PEPE is trading at $0.00000393. If the rally should continue, PEPE must break above its descending trendline near $0.00000400, close to the 100-day EMA at $0.00000404. 

PEPE/USD 4H Chart

A breakout above this level could pave the way for a rally toward the 200-day EMA around the $0.00000500 psychological resistance. 

On the downside, the 50-day EMA at $0.00000368 provides immediate dynamic support, with further downside protection at the February 6 low of $0.00000311.

Source link

Continue Reading

Crypto World

Bitcoin Bollinger Bands Setting Up BTC Price for ‘Powerful Move’

Published

on

Bitcoin Bollinger Bands Setting Up BTC Price for ‘Powerful Move’

Bitcoin (BTC) could see further upside volatility as several technical indicators suggested the BTC price was due for a “powerful“ upward move.

Key takeaways:

  • Bitcoin’s Bollinger Bands indicator now sees the potential for a massive price breakout.

  • BTC price needs to overcome resistance at $80,000 for more upside. 

Bollinger Bands suggest Bitcoin’s “bull run is next”

Bitcoin’s Bollinger Bands have reached their tightest point ever on the monthly time frame, signaling that volatility should be expected soon.

Related: Bitcoin ‘Bull Score’ hits six-month high as 2022 bear-market fears linger

Advertisement

Bollinger Bands (BB) is a technical indicator used by traders to assess momentum and volatility within a certain range.

The “tightest Bitcoin monthly Bollinger band squeeze, ever,” said analyst Cantonese Cat in an X post on Wednesday.

“​​This will lead to a very powerful move when it expands,” the analyst added.

The BTC/USD pair gained about 230% between December 2023 and August 2025 to its current all-time high of $126,000, after breaking above the upper boundary of the Bollinger Bands.

Advertisement

Similar occurrences in 2020 and 2016 triggered the previous bull runs that saw BTC price rally more than 520% and 4,400%, respectively.

BTC/USD monthly chart. Source: Cointelegraph/TradingView

Meanwhile, Coinvo Trading shared a chart showing that Bitcoin’s monthly RSI has dropped to its lowest level since late 2022.

This coincided with the BTC/USD drop to a multi-year support trend line, an occurrence that has previously marked Bitcoin’s macro bottoms.

The last time this happened was at the bottom of the 2022 bear market, preceding a 350% BTC price rally to its previous all-time high of $73,800, reached in March 2024.

“The same exact trendline, the same oversold RSI, the same outcome,” Coinvo Trading said, adding:

Advertisement

“Bull run is next in line.”

BTC/USD monthly chart. Source: Coinvo Trading

As Cointelegraph reported, several Bitcoin metrics, including a bullish MACD crossover on the weekly chart, suggest that a BTC price breakout is about to begin. 

Bitcoin must reclaim $80,000 next

Bitcoin’s 6% rally over the last three days saw the BTC/USD pair fill the $74,000-$77,000 CME gap created over the weekend.

Traders are now looking at the next CME gap above $80,000, formed in early February.

BTC/USD four-hour chart. Source: X/Nic

MC Capital founder Michael van de Poppe said resistance at $79,000 could temporarily “stall” Bitcoin’s upward momentum

“Likely we’ll test it first, come back down for a little, find extra stamina, and then we’ll push through to $86K.”

BTC/USD daily chart. Source: X/Michael van de Poppe

Meanwhile, Bitcoin’s whale order book showed “heavy sell pressure” between $78,000-$80,000, reinforcing the significance of this resistance level.

Bitcoin whale order book. Source: CoinGlass

As Cointelegraph reported, a close above the $76,000-$78,000 resistance zone would confirm that the buyers are in control, clearing the path for a potential rally to $84,000.