Supply Chain Attack Exploits Adform Script to Alter Crypto Wallet Addresses Across Multiple Websites

Hackers exploited a supply chain vulnerability in Adform's JavaScript to dynamically replace cryptocurrency wallet addresses on affected websites. The attack compromised user transactions by altering addresses in real-time through a malicious script injection.

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses.

Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authorities.

Anyone who visited a site carrying the affected script on July 27 and copied a Bitcoin,

Read original article