GCSA Discloses KuCoin Phishing, Bitkub Supply Chain Risks, and Avalanche Contract Vulnerability; Attacker Withdrew Approximately 1.0134 Million USDC

According to Odaily monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing multiple recent digital asset security risks. Attackers impersonated security@ku.com to trick users into downloading remote control programs. GCSA found that the relevant domain had not previously been configured with DMARC; after notification, KuCoin has completed remediation and enabled a DMARC quarantine policy. After the original version of the MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. Installation methods without pinned versions and the risk of plaintext keys may lead to credential leakage. There is currently no evidence of actual theft, and Bitkub has not yet responded to the notification. Within the Avalanche ecosystem, the TranchePool vault was attacked due to a flaw in its cross-day settlement logic. The attacker exploited flash loans and repeated withdrawals to transfer out approximately 1.0134 million USDC within 202 seconds. This incident is an upper-layer application vulnerability, and the underlying network was not affected. GCSA stated that it has reported the leads to the relevant platforms and published the original analysis and evidence for industry reference.