Fake Cryptocurrency Software Update Could Steal Your Digital Wallet

Hackers broke into the Injective Labs software development system and released a fake version of their cryptocurrency software. This malicious version, labeled 1.20.21, was designed to secretly steal private keys and recovery phrases from cryptocurrency wallets. These are like the passwords and backup codes that give you access to your digital money. This affects people who use Injective Labs SDK tools for cryptocurrency trading or investing. If you downloaded or updated to version 1.20.21 of the @injectivelabs/sdk-ts package, your wallet information may have been stolen. The fake software pretended to collect routine usage data but was actually sending your wallet credentials to criminals.

If you use Injective Labs software, take these steps immediately:

1. Check which version of the Injective Labs SDK you have installed. If it is version 1.20.21, assume your wallet keys are compromised.
2. Move all cryptocurrency from any wallets that were accessible while this version was installed to completely new wallets with new keys.
3. Never reuse the old wallet addresses or recovery phrases, as criminals may already have them.
4. Update to a clean, verified version of the software from the official Injective Labs source. For long-term protection with cryptocurrency, only download software directly from official sources. Enable all available security features on your crypto accounts. Consider using hardware wallets for large amounts, as they keep your keys offline where hackers cannot reach them. Always verify software updates are legitimate before installing them, especially for anything that handles your money.