The crypto security alliance SEAL, founded by researcher samczsun, has published a framework on intrusions targeting developers, based on real emergency response cases. The documented attacks now focus on developer machines rather than smart contracts: Bybit lost 1.5 billion dollars in February 2025 and Radiant Capital approximately 50 million dollars after developers’ computers were compromised. Attack vectors include fake recruiters, trapped technical exercises, fake software updates and npm package hijacking, as demonstrated by the compromise of 18 packages totaling over two billion weekly downloads. SEAL recommends isolating signing machines, freezing dependencies, out-of-band verification of contacts and quarantining any unexamined code. The organization also provides free 24/7 assistance through SEAL 911 for teams facing a security incident.
Source: Read the original article
