WOO X exchange suffered a phishing attack via a fake open-source collaboration request that lured a developer to open a malicious development tool. Attackers gained access to the development environment and executed unauthorized withdrawals across nine user accounts, draining $14M across Bitcoin, Ethereum, Arbitrum, and BSC.

Crypto trading platform WOO X suffered an attack resulting in a loss of approximately $14 million. According to the official disclosure, the incident stemmed from a targeted phishing attack that compromised a team member’s device, allowing the attacker to gain access to the development environment.