Digital Asset
Intelligence
Security Incident

React Remote Code Execution Vulnerability

·Historical incident record

Incident Overview

According to Finance Feeds, hackers exploited a vulnerability in the React JavaScript library to inject code into websites that steals funds from cryptocurrency wallets, primarily targeting cryptocurrency platforms. On December 3, the React team released a patch for CVE-2025-55182, a vulnerability that allowed unauthenticated code to execute on remote computers. The React team strongly advised all affected modules to upgrade immediately to prevent further exploitation.

Sources & References

Original incident referencehttps://financefeeds.com/zh-CN/hackers-exploit-javascript-library-to-deploy/ (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    USPD

    Attack method"CPIMP" (Clandestine Proxy In the Middle of Proxy) attack
    Reported loss$ 1,000,000
  2. Incident date
    Target

    Goldfinch

    Attack methodcontract vulnerability
    Reported loss$ 330,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed