The well-known cryptocurrency price tracking website CoinMarketCap experienced a supply chain hack that left users vulnerable to a wallet drainer campaign that stole their cryptocurrency.
Visitors to CoinMarketCap started seeing Web3 popups requesting that they link their wallets to the website on Friday night, January 20. However, a rogue software depleted visitors’ cryptocurrencies when they connected their wallets.
The business subsequently acknowledged that threat actors had introduced malicious JavaScript onto the website by exploiting a flaw in the “doodle” image on the homepage.
Our security team discovered a flaw in a doodle image that was shown on our homepage on June 20, 2025. According to a statement made on X, this doodle artwork included a link that, when seen on our homepage, caused certain users to see an unexpected popup read more about CoinMarketCap briefly hacked to drain crypto wallets via fake Web3 popup.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.