Mitrade Insights is dedicated to providing investors with rich, timely and most valuable financial information to help investors grasp the market situation and find timely trading opportunities.

2021

Best News & Analysis Provider

FxDailyInfo

2022

Best Forex Educational Resources Global

International Business Magazine

Insights

News

Cryptocurrencies

React vulnerability sparks surge in crypto wallet drainers

Source Cryptopolitan

Security Alliance (SEAL) have issued a warning that hackers are exploiting a serious React vulnerability to take over cryptocurrency websites. The SEAL stated that the vulnerability is fueling a surge of wallet-draining attacks that put users and platforms at immediate risk.

React Server Components (RSCs) feed the rendered result to clients (browsers) while operating on the server, rather than in the browser. However, the React team discovered a critical vulnerability with a maximum severity rating of 10 out of 10 in these packages.

Unpatched React servers risk remote code execution attacks

The React team issued an advisory stating that the vulnerability, known as React2Shell and listed as CVE-2025-55182, allows attackers to remotely execute code on compromised servers without requiring authentication. React’s maintainers reported the vulnerability on December 3 and assigned it the highest possible severity score.

According to the React team, CVE-2025-55182, affects the react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack packages in versions 19.0, 19.1.0, 19.1.1, and 19.2.0.

Crypto Drainers using React CVE-2025-55182

We are observing a big uptick in drainers uploaded to legitimate (crypto) websites through exploitation of the recent React CVE.

All websites should review front-end code for any suspicious assets NOW.

— Security Alliance (@_SEAL_Org) December 13, 2025

SEAL urged that “All websites should review front-end code for any suspicious assets NOW.” The SEAL further stated that users should exercise caution when signing any crypto-related permission signature, as all websites, not just those using Web3 protocols, are vulnerable.

According to SEAL, all web development teams should scan hosts for CVE-2025-55182 and see if their code is unexpectedly loading assets from unknown hosts. Seal further instructed that teams should confirm the wallet displays the correct recipient on the signature signing request. The teams should also determine whether any of the “Scripts” loaded by their code are obfuscated JavaScript.

Shortly after the disclosure of CVE-2025-55182, SEAl found two more vulnerabilities in React Server Components while testing the previous patch. According to the React blog, SEAL disclosed CVE-2025-55184 and CVE-2025-67779 (CVSS 7.5), which are identified as Denial of Service and High Severity vulnerabilities. Next, SEAL disclosed CVE-2025-55183 (CVSS 5.3) which the researchers identified as Source Code Exposure and Medium Severity.

The React team advised that all websites should upgrade immediately due to the seriousness of the recently revealed vulnerabilities.

According to JS’s advisory, the denial-of-service vulnerability, identified as CVE-2025-55184, allows attackers to create malicious HTTP requests and send them to any App Router or Server Function endpoint. The report further explained that these requests create an endless loop that hangs the server process and prevents future HTTP requests from being served.

According to the Common Vulnerability Scoring System (CVSS), CVE-2025-55184 carries a high severity score of 7.5 out of 10.

CVE-2025-55183, the second source code leakage vulnerability, has a medium severity rating of 5.3 out of 10.

According to Next.js, the exploit chain would be similar. Next.js explained that a susceptible endpoint receives a specially constructed HTTP request from the attacker, which returns the source code of any Server Function. Next. js team cautioned that hardcoded secrets and the company’s logic could be exposed by disclosing generated source code.

Crypto drainers refine evasion tactics for stealthy crypto theft

The rise in drainers, facilitated by the React vulnerability, coincides with the testing of new strategies by crypto-stealing drainer operators and their affiliates to evade detection and exploit crypto wallets.

According to crypto security specialists from the Security Alliance (SEAL), drainer affiliates are now utilizing high-reputation domains for landing pages and payload hosting, re-registering previously valid domains, and implementing sophisticated fingerprinting techniques. The Security researchers claimed that the goal is to disseminate crypto-drainers, a harmful piece of JavaScript that is injected into phishing websites, and thwart security researchers.

SEAL said that evasion tactics vary among affiliates of a particular drainer family and are not consistently enforced at the drainer service level.

In a different cryptocurrency crime scenario, DeFi protocol Aevo (previously Ribbon Finance) announced on Sunday that $2.3 million had been drained from its vaults. DeFi creator Anton Cheng claimed that an updated Oracle code, which made it possible for anyone to set prices for new assets, was the primary cause of the breach.

Join a premium crypto trading community free for 30 days - normally $100/mo.

Disclaimer: For information purposes only. Past performance is not indicative of future results.

Recommended Articles

Gold Price Forecast: XAU/USD drifts higher above $4,200 as Fed delivers expected cut Gold price (XAU/USD) gains momentum to around $4,235 during the early Asian session on Thursday. The precious metal extends its upside after the US Federal Reserve (Fed) delivered an expected third consecutive interest rate cut and maintained its outlook for just one cut in 2026.

Author FXStreet

Dec 11, Thu

Gold price (XAU/USD) gains momentum to around $4,235 during the early Asian session on Thursday. The precious metal extends its upside after the US Federal Reserve (Fed) delivered an expected third consecutive interest rate cut and maintained its outlook for just one cut in 2026.

Gold remains bid as lack of Fed clarity and geopolitical frictions persist Gold (XAU/USD) advances modestly on Friday as traders seem to book profits ahead of the weekend, yet clings to gains of over 0.51% after reaching a seven-week high of $4,353. At the time of writing, XAU/USD trades at $4,302 as traders digest comments from Federal Reserve (Fed) officials.

Author FXStreet

Yesterday 01: 34

Gold (XAU/USD) advances modestly on Friday as traders seem to book profits ahead of the weekend, yet clings to gains of over 0.51% after reaching a seven-week high of $4,353. At the time of writing, XAU/USD trades at $4,302 as traders digest comments from Federal Reserve (Fed) officials.

Ethereum Price Slips Lower — $3,000 Looms as the Key Battleground Ethereum is attempting to recover from a $3,026 low but remains below $3,200 and the 100-hour SMA, with a bearish trend line near $3,175 capping rebounds as bulls need a clean break above $3,200 to target $3,250–$3,400, while a drop below $3,050 risks a retest of $3,000 and $2,940.

Author Mitrade

Yesterday 03: 25

Ethereum is attempting to recover from a $3,026 low but remains below $3,200 and the 100-hour SMA, with a bearish trend line near $3,175 capping rebounds as bulls need a clean break above $3,200 to target $3,250–$3,400, while a drop below $3,050 risks a retest of $3,000 and $2,940.

Macro Analysts: Hawkish Japan Could Push Bitcoin Below $70K Analysts predict Bitcoin may face further declines towards the $70,000 mark if the Bank of Japan raises interest rates as expected.

Author Mitrade

Yesterday 05: 48

Analysts predict Bitcoin may face further declines towards the $70,000 mark if the Bank of Japan raises interest rates as expected.

Bitcoin Slides 5% as Sellers Lean In — Can BTC Reclaim $88,000?Bitcoin has dropped back below $88,000 after rolling over from $90,500, with price still trading under the 100-hour Simple Moving Average. The sell-off found a floor at $85,151, and BTC is now consolidating near that base, but rebounds are facing pressure from a bearish trend line around $89,000. Bulls need to retake $88,000–$89,000 to ease downside risk; failure to do so keeps $85,500–$85,000 and then $83,500 in play, with $80,000 as the deeper “line in the sand.” Bitcoin (BTC) is back in damage-control mode after a sharp pullback wiped out recent gains. The price failed to reclaim the $90,000–$90,500 band, rolled over, and slid through $88,500 before briefly dipping under $87,000. Buyers did show up around $85,000, but the rebound so far looks more like stabilization than a clear trend reversal. Bitcoin dips hard, finds a bid near $85,000（h3） BTC’s latest move lower began when it couldn’t build follow-through above $90,000 and $90,500. Once that upside stalled, sellers took control and pushed price down through $88,500. The slide accelerated enough to spike below $87,000, but the market didn’t free-fall. Bulls defended the $85,000 zone, printing a low at $85,151. Since then, Bitcoin has been consolidating below the 23.6% Fibonacci retracement of the drop from the $93,560 swing high to the $85,151 low — a clue that the bounce is still shallow and that sellers haven’t fully backed off yet. Structurally, BTC is still on the back foot: It’s trading below $88,000, and It remains below the 100-hour Simple Moving Average, keeping short-term trend pressure pointed downward. Resistance is layered, and $89,000 is the problem area（h3） If bulls try to turn this into a recovery, they’ll have to climb through multiple ceilings in quick succession. First, BTC faces resistance around $87,150, followed by a more meaningful barrier near $87,500. From there, the market’s attention snaps back to $88,000 — the level BTC just lost and now needs to reclaim. A close back above $88,000 would improve the tone, but it doesn’t solve the bigger issue: there’s a bearish trend line on the hourly BTC/USD chart (Kraken feed) with resistance near $89,000, which also lines up with the next technical hurdle. If BTC can push through $89,000 and hold, the rebound could extend toward $90,000, with follow-through targets at $91,000 and $91,500. But until price clears that $88,000–$89,000 zone, rallies are at risk of being sold rather than chased. If BTC fails to reclaim resistance, the downside path is clear（h3） The near-term bear case is simple: if Bitcoin can’t climb back above the $87,000 area and keep traction, sellers may attempt another leg lower. Support levels line up like this: Immediate support: $85,500 First major support: $85,000 Next support: $83,500 Then $82,500 in the near term Below that, the major “don’t break this” level is still $80,000. If BTC slips under $80,000, the risk of acceleration to the downside increases significantly — not because it’s magic, but because it’s the kind of psychological and structural level that tends to trigger forced de-risking. Indicators: momentum still leans bearish（h3） The intraday indicators aren’t offering much comfort yet: Hourly MACD is losing pace in the bearish zone. Hourly RSI remains below 50, suggesting sellers still have the upper hand on short timeframes. So while the $85,000 defense held for now, the market hasn’t flipped bullish — it’s just stopped bleeding.

Author Mitrade

10 hours ago

Bitcoin has dropped back below $88,000 after rolling over from $90,500, with price still trading under the 100-hour Simple Moving Average. The sell-off found a floor at $85,151, and BTC is now consolidating near that base, but rebounds are facing pressure from a bearish trend line around $89,000. Bulls need to retake $88,000–$89,000 to ease downside risk; failure to do so keeps $85,500–$85,000 and then $83,500 in play, with $80,000 as the deeper “line in the sand.” Bitcoin (BTC) is back in damage-control mode after a sharp pullback wiped out recent gains. The price failed to reclaim the $90,000–$90,500 band, rolled over, and slid through $88,500 before briefly dipping under $87,000. Buyers did show up around $85,000, but the rebound so far looks more like stabilization than a clear trend reversal. Bitcoin dips hard, finds a bid near $85,000（h3） BTC’s latest move lower began when it couldn’t build follow-through above $90,000 and $90,500. Once that upside stalled, sellers took control and pushed price down through $88,500. The slide accelerated enough to spike below $87,000, but the market didn’t free-fall. Bulls defended the $85,000 zone, printing a low at $85,151. Since then, Bitcoin has been consolidating below the 23.6% Fibonacci retracement of the drop from the $93,560 swing high to the $85,151 low — a clue that the bounce is still shallow and that sellers haven’t fully backed off yet. Structurally, BTC is still on the back foot: It’s trading below $88,000, and It remains below the 100-hour Simple Moving Average, keeping short-term trend pressure pointed downward. Resistance is layered, and $89,000 is the problem area（h3） If bulls try to turn this into a recovery, they’ll have to climb through multiple ceilings in quick succession. First, BTC faces resistance around $87,150, followed by a more meaningful barrier near $87,500. From there, the market’s attention snaps back to $88,000 — the level BTC just lost and now needs to reclaim. A close back above $88,000 would improve the tone, but it doesn’t solve the bigger issue: there’s a bearish trend line on the hourly BTC/USD chart (Kraken feed) with resistance near $89,000, which also lines up with the next technical hurdle. If BTC can push through $89,000 and hold, the rebound could extend toward $90,000, with follow-through targets at $91,000 and $91,500. But until price clears that $88,000–$89,000 zone, rallies are at risk of being sold rather than chased. If BTC fails to reclaim resistance, the downside path is clear（h3） The near-term bear case is simple: if Bitcoin can’t climb back above the $87,000 area and keep traction, sellers may attempt another leg lower. Support levels line up like this: Immediate support: $85,500 First major support: $85,000 Next support: $83,500 Then $82,500 in the near term Below that, the major “don’t break this” level is still $80,000. If BTC slips under $80,000, the risk of acceleration to the downside increases significantly — not because it’s magic, but because it’s the kind of psychological and structural level that tends to trigger forced de-risking. Indicators: momentum still leans bearish（h3） The intraday indicators aren’t offering much comfort yet: Hourly MACD is losing pace in the bearish zone. Hourly RSI remains below 50, suggesting sellers still have the upper hand on short timeframes. So while the $85,000 defense held for now, the market hasn’t flipped bullish — it’s just stopped bleeding.

Popular Articles

Popular Articles

Popular Articles

Popular Articles

Popular Articles

Popular Articles

Popular Articles

Popular Articles

Popular Analysis

Popular Analysis

Popular Analysis

Popular Analysis

Popular Analysis

Popular Analysis

Top Blog Posts

Top Blog Posts

Top Blog Posts

Top Blog Posts

Top Blog Posts

Top Blog Posts

Top Blog Posts

Beginners

React vulnerability sparks surge in crypto wallet drainers

Unpatched React servers risk remote code execution attacks

Crypto drainers refine evasion tactics for stealthy crypto theft

Recommended Articles