The next big DeFi exploit will start before the code is deployed
Socket’s May 24 disclosure of TrapDoor discovered greater than 34 malicious packages and over 384 associated variations unfold throughout npm, PyPI, and Crates.io, every concentrating on the builders who construct and keep protocols, and the credentials that govern entry to the techniques round them. What TrapDoor constructed is a route from a single developer’s compromised…
