📢 Exclusive on Gate Square — #PROVE Creative Contest# is Now Live!
CandyDrop × Succinct (PROVE) — Trade to share 200,000 PROVE 👉 https://www.gate.com/announcements/article/46469
Futures Lucky Draw Challenge: Guaranteed 1 PROVE Airdrop per User 👉 https://www.gate.com/announcements/article/46491
🎁 Endless creativity · Rewards keep coming — Post to share 300 PROVE!
📅 Event PeriodAugust 12, 2025, 04:00 – August 17, 2025, 16:00 UTC
📌 How to Participate
1.Publish original content on Gate Square related to PROVE or the above activities (minimum 100 words; any format: analysis, tutorial, creativ
North Korean developers hijacked dormant Waves repositories, embedding code to steal credentials in wallet updates.
PANews reported on June 19 that a North Korean developer gained elevated privileges in the Waves Protocol's Keeper-Wallet codebase. The account "AhegaoXXX" has been pushing updates to the dormant codebase since May 2025, and this account has been confirmed to be linked to a North Korean IT outsourcing organization. Code reviews revealed that a certain submission added functionality to send wallet logs and runtime errors to an external database, potentially stealing mnemonic phrases and Private Keys. Although this branch has not been merged, the attacker has released six long-unupdated malicious NPM packages by controlling the account of former Waves engineer Maxim Smolyakov. The security report indicates that this incident shows North Korean hackers shifting from ordinary outsourcing infiltration to direct control of code repositories. It is recommended that development teams strengthen supply chain protection, including auditing contributor permissions, cleaning up dormant accounts, and monitoring repository redirection. Currently, the download volume of the affected software is low, but there is a risk of credential leakage for Waves users updating the Keeper-Wallet.