CoinMarketCap, a leading cryptocurrency price-tracking platform, has confirmed the removal of a malicious wallet verification pop-up that appeared on its website, sparking fears of a phishing scam among crypto users.
In a post shared on its official X (formerly Twitter) account, CoinMarketCap stated, “We’ve identified and removed the malicious code from our site.” The warning came shortly after users began reporting a suspicious “Verify Wallet” prompt on the platform that mimicked legitimate wallet connection requests.
Phishing Attempt Sparks Widespread Concern
The pop-up, which prompted users to connect their crypto wallets and approve token access, was flagged by users as a phishing attack. Many noted that the interface resembled official prompts from well-known wallets like MetaMask and Phantom, but aimed to steal private keys or gain unauthorized token approvals.
User @auri reported, “It asks to connect wallet and then asks for approvals to ERC-20 tokens,” a typical pattern for phishing schemes in the crypto space.
MetaMask and Phantom Flag Threat Immediately
Both MetaMask and Phantom, two popular wallet extensions, were quick to react. Phantom displayed a red alert stating the CoinMarketCap website was “unsafe to use,” according to reports verified by Cointelegraph.
The platform responded within hours, acknowledging the issue and assuring users that further steps were being taken to investigate and prevent future threats.
“Our team is continuing to investigate and taking steps to strengthen our security,” CoinMarketCap added in its official statement.
Not the First Security Scare for CoinMarketCap
This latest incident follows a prior breach in October 2021, when the site was hacked and over 3.1 million user email addresses were exposed and later found circulating on hacker forums. The breach was documented by Have I Been Pwned, a well-known platform for tracking leaked credentials and online breaches.
Although the latest phishing attempt was swiftly neutralized, the recurrence of security threats has raised fresh concerns about platform trust and user data safety.
User Advisory Still in Effect
As of now, CoinMarketCap advises users not to connect any wallets through suspicious pop-ups and to verify all wallet-related interactions through trusted channels. Users are also reminded to avoid clicking unsolicited links or approving unknown token permissions, especially during market volatility or trending events.
What This Means for Crypto Investors
This event underscores the ongoing cybersecurity risks in the crypto ecosystem. As platforms become targets for phishing campaigns, user awareness, secure wallet practices, and browser extension warnings remain critical first lines of defense.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments are volatile and risky. Always conduct your research before making any investment decisions.
