Digital Asset
Intelligence
Security Incident · Wallet

Gitcoin Front-end Attack

·Historical incident record

Incident Overview

Blockchain security firm Blockaid detected a front-end attack on Gitcoin’s subdomain files.gitcoin.co. The compromised site contained malicious “Eleven drainer” code designed to steal users’ cryptocurrency wallet assets. Users were advised not to interact with the site while the issue is being investigated and remediated. This is a frontend compromise incident rather than an on-chain smart contract exploit.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Gitcoin

    Attack methodAccount Compromise
    Reported lossNot disclosed
  2. Incident date
    Target

    SecondFi

    Attack methodPredictable Private Key Exploit
    Reported loss$ 2,400,000
  3. Incident date
    Attack methodPrivate Key Leakage
    Reported lossNot disclosed
  4. Incident date
    Attack methodOracle Misassignment
    Reported loss$ 73,400
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 3,500