News linked to both this project and an event.
Odaily News: Bitcoin News posted on X platform that Xapo Bank users have reported the app now requires location data before allowing transactions. According to reports, one user was told they must share GPS coordinates to access their funds. Xapo Bank stated it will cross-check location information with other data to confirm that the account holder controls the account. @ToneVays warned that location requirements could become standard for regulated payment apps; Casa CEO @Nneuman said the measure may be aimed at countering large-scale social engineering attacks rather than traditional KYC.
GoPlus Security issued a security alert stating that a user signed a malicious Permit transaction 183 days ago, resulting in approximately $1,625 worth of USDC being transferred by phishing attackers. Since the user did not revoke the relevant authorization thereafter, attackers exploited this authorization again to transfer approximately $75,780 worth of USDC.
GoPlus Security reported that a user fell victim to a typical address poisoning attack: the user mistakenly sent 100,000 DAI to a spoofed address after copying a visually similar address from their transaction history. In this incident, the user had previously sent 300,000 DAI to the legitimate target address; the attacker then sent 0.0003 DAI to the user from a malicious address with characters nearly identical to the legitimate one—before and after the address—thereby tricking the user into selecting the wrong address during their subsequent transfer. GoPlus Security advises users not to copy wallet addresses from transaction history, always verify the full address before sending funds, and conduct a small test transaction prior to any large transfer.