Cointelegraph and CoinMarketCap Hacked: Why Non-Custodial Wallets Are Necessary
Want to check on Bitcoin’s latest price moves? Just pop over to CoinMarketCap and… enter your wallet info? On June 20, 2025, visitors to a number of major crypto sites, including CoinTelegraph and CoinMarketCap, were pro...
Archive context
Older archive item. Useful for background and entity history, but not a fresh market-moving signal.
Want to check on Bitcoin’s latest price moves? Just pop over to CoinMarketCap and… enter your wallet info?
On June 20, 2025, visitors to a number of major crypto sites, including CoinTelegraph and CoinMarketCap, were prompted to connect their crypto wallets before accessing the site.
The pop-up was a hack, a wallet-stealer designed to siphon information away from users.
CoinMarketCap users can create accounts and connect wallets to track their portfolios, so the pop-up itself might not have seemed entirely out-of-place.
Users quickly uncovered the hack, and affected sites moved rapidly to limit the damage.
The incident highlights a new potential vulnerability in the growing crypto ecosystem. With such attacks, phishing can occur even on trusted platforms. What Wallet? Hacks Exploited Common Wallet Connectivity FeaturesThe incident involved the injection of malicious JavaScript code into CoinMarketCap’s homepage.
When unsuspecting users visited the site, they were greeted with a realistic-looking ‘Connect Wallet to Verify’ popup, mimicking standard Web3 wallet connection prompts.
Users who clicked the popup and approved the transaction gave attackers full access to their wallets.
The CMC hack reportedly had 39 victims with over $18K in losses. The script was since removed, and CMC has patched the vulnerability.
Cointelegraph Also TargetedJust days later, on June 23, Cointelegraph, another prominent crypto news outlet, faced a similar attack.
In this case, attackers managed to compromise an ad-serving network, injecting code that produced a fake token airdrop popup promoting a nonexistent ‘Cointelegraph token’ or ‘CTG.’
The popup redirected users to a phishing site designed to harvest wallet signatures.Once again, users who interacted and signed the transaction lost access to their funds. Cointelegraph quickly issued a warning across its social media channels and disabled the malicious script.
Both the CMC and CT hacks are part of a growing category of crypto hacks focused on compromising wallets.
Per CertiK’s quarterly report, these attacks produce the largest losses (over $1.450M in Q1 2025 alone).
Wallet compromises are not as successful as other attacks, ranking last by incident count. But when they work, hackers can make off with vast amounts quickly.
Vigilance and Knowing the Warning Signs: Key to Avoid LossesBinance founder and former CEO Changpeng Zhao (CZ) took to X and warned users to ‘be careful when authorizing wallet connect.’
Both the CMC and CT hacks used pop-ups, one for a simple wallet connect prompt, and one for a purported crypto airdrop.
Cointelegraph’s official account also posted a warning, urging users to not click the pop-ups, connect wallets, or provide their personal information.
Crypto airdrops and crypto presales are often used by legitimate projects to develop early interest and generate buzz about new projects, making such phishing attacks more convincing.
Scammers create fakes in order to encourage investors to give away wallet information. The supposed project or token – in this case ‘CTG’ – never existed.How do investors stay safe? Avoiding any unexpected or unusual pop-ups, even from trust sources, is a first step.
And when it comes to the crypto ICOs and presales, it’s important to get your info from trusted sources. This is where a new solution, Best Wallet, stands out.
This new app is the only Web3 wallet with a presale directory where you can browse only audited, secure presale tokens.
The wallet also employs Multi-Party Computation technology, protecting your key from phishing attacks and hacks.
Best Wallet Token ($BEST) – The World’s First and Only Crypto Presale WalletThe evolution of crypto hacks is unfortunately part of crypto’s growing market and popularity.
New Web3 solutions, like Best Wallet, are evolving to tackle these security challenges, becoming a critical part of the crypto economy.
And the Best Wallet Token ($BEST) is here to power-up the Best Wallet ecosystem and provide additional perks for holders.
With $BEST, token holders can trade and swap tokens more easily, participate in community governance, and earn higher staking rewards.
The token also allows early access to the best crypto presales, gathered and vetted by Best Wallet in their ‘Upcoming Tokens’ section.
Here, investors can find upcoming crypto projects, as well as all the key information, such as whitepapers and tokenomics, needed to do research before investing.
That makes Best Wallet’s platform and token some of the handiest tools for crypto investors who want to avoid shady pop-ups and still stay ahead of the markets.Most importantly, Best Wallet is non-custodial and privacy-focused; investors control all their wallet keys and can sign up and swap crypto without KYC.
The Best Wallet token presale has raised $13.5M so far, with the coin currently priced at $0.025225.
Note that, given its sought-after, privacy-oriented wallet, the $BEST token could reach $0.05 by the end of 2026 after a successful launch, delivering 102% returns to early investors.
If you’re interested in supporting the project, now’s the right opportunity to buy the Best Wallet Token at the lowest price.
Visit Best Wallet’s Token presale today.
Security in the Age of Web3The recent front-end Cointelegraph and CoinMarketCap hacks mark a dangerous new phase in crypto security threats.
Unlike traditional hacking methods that target backend systems or databases, these exploits weaponize the user interface, where trust is assumed but rarely verified.
Secure Web3 wallets like Best Wallet can go a long way towards mitigating such growing risks.
As always, do your own research before investing or choosing a crypto service provider. This article isn’t financial advice.
Why this matters
This security story adds another data point to the current market tape and is useful when read alongside nearby source coverage.
Original source
Read on NewsBTCRelated market context
Coldcard attack: 25 minutes, 500 wallets, $38M in BTC gone
Someone likely used AI to drain almost 600 BTC, worth $38 million, from roughly 500 dormant wallets yesterday as part of a seed ph...
Biotech company asks shareholders to dilute stock by 951% to hoard illiquid crypto token instead of funding its own drug
Enlivex, a Nasdaq-listed biotechnology company, is asking shareholders to authorize up to $800 million of financing tied to the RA...
IRS Warns Fake Crypto Letters Target Wallets and Personal Data
Fraudsters are mailing counterfeit IRS notices that direct cryptocurrency holders toward a fabricated compliance portal designed t...
Crypto News, July 31: July Round Up, Kospi Coming Back, Bitcoin Price Ignores Political Noise as Market Splits
The Kospi ended July with a powerful rebound, while the Bitcoin price stayed remarkably steady despite several major headlines. We...
Galaxy Research identifies 1,367 BTC drained in attacks on Coldcard addresses
The Coldcard breach highlights critical vulnerabilities in hardware wallet security, urging investors to reassess their digital as...
Coldcard Wallet Flaw Exposes Years of Bitcoin Seeds After $70M in BTC Stolen
Bitcoin Magazine Coldcard Wallet Flaw Exposes Years of Bitcoin Seeds After $70M in BTC Stolen The popular Bitcoin hardware wallet...