NPM Supply Chain Attack Targets Crypto Users with 2B+ Downloads
NPM Supply Chain Attack Targets Crypto Users with 2B+ Downloads
🚨 2B downloads compromised
A major supply chain attack infiltrated NPM packages with over 2 billion weekly downloads, specifically targeting crypto users. The malicious code:
- Swaps wallet addresses with look-alikes
- Alters transactions right before signing
- Silently drains funds from compromised wallets
Ledger's CTO amplified warnings that millions of wallets were potentially exposed. The attack highlights how dependency risk creates massive blast radius vulnerabilities.
Key Security Recommendations:
- Use hardware-verified signing for large transactions
- Keep keys offline and avoid hot signing
- Verify addresses on device before confirming
NGRAVE offers a solution as the only EAL7-certified hardware wallet that operates fully air-gapped. Keys never touch the internet, and every transaction is screened on-device.
PAID Network Partnership: Community members can invest in NGRAVE's equity round at a $30M valuation cap - 15% cheaper than institutional investors. The deal includes 7% yearly interest and converts within 24 months.
Investment Perks:
- $1k+: 10% wallet discount
- $10k+: Free flagship wallet
- Every $500 enters lottery
With modern wallet solutions you are always risking losing your funds 🤯 Check out Justin Chevalier, our General Manager in conversation with founder & CEO Xavier Hendrick about why today’s wallet solutions aren’t optimal for end users: frequent hardware upgrades, tiny screens,
15/ 70% Discount on Bluwhale’s $100M AI Round. Only on @paid_network PAID’s Bluwhale deal is unlike anything available on the open market: equity at a $30M valuation paired with a 1:1 BLUAI token airdrop, all at a 70% discount to the company’s ongoing $100M round. For most
The most secure wallet in crypto was born out of real near-disasters. NGRAVE’ founders lived through the risks, then built the solution now trusted with $1.6B+ in assets. Our general manager Justin Chevalier sat down with @ngrave_official's co-founder & CEO Xavier Hendrick to
1/ PAID community gets exclusive access to NGRAVE - the world’s most secure hardware wallet, already trusted to protect $1.6B+ in digital assets. Backed by Mechanism, Woodstock, Morningstar Ventures, IMEC, and a top-5 global asset manager. Unlike Ledger or Trezor,
⏳ Bluwhale raise closes Monday Bluwhale = Web3’s first two-sided intelligence marketplace: • Targeting across 37 chains • Users earn for data • Privacy via federated learning Deal highlights: • Equity at $30M (70% discount to $100M round) • 1:1 BLUAI token airdrop •
All mainstream wallets have huge security risks, NGRAVE bypasses them with intentional design choices: -fully operates off-line -innovative way to store your private key -large screens that allow people to see and decode transactions better In the video below their CEO
Congrats - Bluwhale has officially hit its soft cap, the first hybrid raise on PAID! Closes today at 20:00 UTC, less than 10h left to join. Deal perks: • Equity at $30M valuation (70% discount vs $100M round) • Equivalent BLUAI token airdrop bonus • 0% carry fee to celebrate
PAID unlocks equity on-chain: invest in high-growth startups from $500 and pay 0 % carry when you stake at Diamond tier. One wallet, two worlds - tokens and private equity. Full story👇 paidnetwork.medium.com/from-launchpad…
Most investment funds take 20% carry while you keep only 80% of potential profits. At PAID, Diamond stakers (375k $PAID) pay 0% carry and keep 100%. For Bluwhale’s hybrid raise, everyone gets Diamond benefits: → 0% carry fees → $30M valuation (70% discount vs $100M round) →
The deal is live → paidnetwork.com/equity/bluwhale Equity + tokens at a 70% discount to @bluwhaleai’s $100M round with 0% carry fees. Opportunities like this don’t repeat. Missed the registration window? Open a ticket and our team will help you join → help.paidnetwork.com/support/ticket…
1/ Web3 has a broken data economy. Companies burn treasuries on blind airdrops hitting bots and dead wallets. Meanwhile, tech giants like Meta and Google extract billions from user data while users get nothing. Both sides lose. Here's how @bluwhaleai fixes it 🧵
Registration is mandatory to access the @bluwhaleai deal. Here’s why Bluwhale is a once-in-a-lifetime shot: 🐋 70% discount vs. current $100M round 🐋 Equity + token airdrop (12 m cliff, 36 m vest) 🐋 Promotional 0% carry fee - keep all your upside 🐋 Backers: SBI Holdings,
One more chance to explore all the benefits our new tier system offers for token raises before we shift the spotlight with big news this week: paidnetwork.medium.com/introducing-pa…
1/ The @bluwhaleai equity raise is now live! Bluwhale has onboarded over 3.5M wallets, generated $1.7M in revenue in 2024, and is backed by SBI Holdings, Decima Fund, and Sui Foundation. As part of our promotion, all investors pay 0% carry fees, meaning you keep 100% of all
Yapping, mindshare, and hype are great. But nothing beats a real product with utility, traction, and Tier-1 backing… @bluwhaleai current round is at $100M valuation. PAID community gets in at $30M, a 70% discount, plus a one-time 0% carry fee for all participants.
Only 24 hours left before the Bluwhale raise closes
Registration is mandatory to access the @bluwhaleai deal. Here’s why Bluwhale is a once-in-a-lifetime shot: 🐋 70% discount vs. current $100M round 🐋 Equity + token airdrop (12 m cliff, 36 m vest) 🐋 Promotional 0% carry fee - keep all your upside 🐋 Backers: SBI Holdings,
1/ 🚨 Last week’s supply chain attack pushed malicious code into NPM packages with 2B+ weekly downloads. It targeted crypto users directly, reminding us Web3 is only one bad dependency away from chaos. Here’s what happened, why it matters, and how you can invest in the fix via
Market’s moving. Perfect timing as PAID’s been stacking moves for this moment. → From launchpad to capital formation platform → Private-market equity raises on-chain → First hybrid raise with @bluwhaleai (equity + tokens) → 0% carry & protocol fees for top stakers → U.S.
You can own equity in NGRAVE via PAID, but why NGRAVE? 🤔 In this video, Justin our General Manager explains NGRAVE'S superior offering: 1️⃣Worlds most secure wallet - EAL-7 2️⃣Staking/swaps directly in wallet 3️⃣4.6 star rating 4️⃣Already protects $1.6B in assets Make sure to
Next on PAID: after Bluwhale, we’re bringing another tier-1 deal - NGRAVE, the most secure wallet safeguarding $1.5B+ in assets. @ngrave_official is the only EAL7-certified wallet, designed for institutions and already preparing partnerships with top global asset managers. All
📢 Partnership Announcement We’re excited to announce our new partnership with @ngrave_official - the world’s most secure self-custody wallet. NGRAVE is now the wallet of choice for the PAID community, and as part of this collaboration we’re rolling out exclusive initiatives
ONCHAIN FM Returns with Kaia Chain, TON Blockchain, and XNET Mobile
**ONCHAIN FM** is back this week featuring guests from **Kaia Chain**, **TON Blockchain**, and **XNET Mobile**. The show will explore: - Macro economic events - Their impact on the crypto economy - Insights from leading blockchain projects **Streaming exclusively on X** - your seat is already reserved for this discussion on market dynamics and crypto trends.
Pascal Protocol Token Now Live on Ethereum
**Pascal Protocol (PASC) is now available for trading** following its successful flash raise on PAID Network. **Key Details:** - Claim now open on [PAID Network](https://www.paidnetwork.com/deals/pascalprotocol) - **50% tokens unlocked** at launch, remainder vests linearly over 6 months - Switch to **Ethereum chain** before claiming - Token contract: `0x65d6ae56f6e4f3aa7C4249C4023698104C4AB5F4` **Immediate Benefits:** - **Staking enabled** with 1535% APY rewards - Earn additional **Jetstream Points** - Trading pools active on [DEXTools](https://www.dextools.io/app/en/ether/pair-explorer/0x67c0f6c452831efa354c0ed379392b42eeff246d) **User Protection Active:** Participants have 24 hours to claim tokens with protection against downside risk. Pascal Protocol provides institutional-grade DeFi clearing infrastructure, already generating revenue through its Jetstream platform with $4M daily trading volume.
Pascal Protocol TGE Delayed
Pascal Protocol's Token Generation Event (TGE) has been **postponed until 14:00 UTC** today. This marks the second delay for the project, following a previous 30-minute postponement of their Flash Raise event. The team is asking for community patience as they finalize preparations for the token launch.
Pascal Clearing Hosts Live AMA on TGE and DeFi Infrastructure
**Pascal Clearing** held a live AMA discussing their upcoming **Token Generation Event (TGE)** and their mission to build the next clearing engine for DeFi. Key discussion points included: - Their **value proposition** for the DeFi ecosystem - Technical details about their **clearing engine infrastructure** - Timeline and details surrounding their **TGE launch** - How they plan to **differentiate** from existing DeFi clearing solutions The AMA provided insights into Pascal's approach to solving **settlement and clearing challenges** in decentralized finance, positioning themselves as infrastructure for the next generation of DeFi protocols.