Circle's Arc Blockchain Hit by Phishing Attacks Targeting OnBridge Users
Circle's Arc blockchain has been hit by a series of phishing attacks targeting users who interacted with its OnBridge cross-chain bridge page.
The attackers allegedly sent victims' USDC to attacker-controlled addresses after luring them to malicious versions of the OnBridge interface, either through search engine ads, phishing emails, or compromised social media posts.
Experts suspect that users may have been tricked into using fake interfaces that mimicked the legitimate page, capturing user approvals or private keys and transferring funds once the transaction was signed.
The incident highlights a persistent vulnerability in the crypto ecosystem: users often rely on bookmarked links or search results to access dApps, which can be spoofed by malicious actors.