exodus – Earlybirds Invest https://earlybirdsinvest.com Latest Crypto News Thu, 21 Aug 2025 09:09:36 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.8 https://i0.wp.com/earlybirdsinvest.com/wp-content/uploads/2024/12/cropped-New-Project-2024-12-17T235703.455.png?fit=32%2C32&ssl=1 exodus – Earlybirds Invest https://earlybirdsinvest.com 32 32 240146708 BlackRock’s Bitcoin and Ethereum ETFs leads market exodus of over $500 million https://earlybirdsinvest.com/blackrocks-bitcoin-and-ethereum-etfs-leads-market-exodus-of-over-500-million/ https://earlybirdsinvest.com/blackrocks-bitcoin-and-ethereum-etfs-leads-market-exodus-of-over-500-million/#respond Thu, 21 Aug 2025 09:09:36 +0000 https://earlybirdsinvest.com/blackrocks-bitcoin-and-ethereum-etfs-leads-market-exodus-of-over-500-million/

US spot Bitcoin and Ethereum exchange-traded funds (ETFs) posted another round of withdrawals on Aug. 20, extending their streak of consecutive net outflows to a fourth straight trading day.

According to SoSoValue data, Spot Bitcoin ETFs recorded $311.57 million in outflows for the day, pushing their four-day total to nearly $1 billion.

BlackRock’s iShares Bitcoin Trust (IBIT) led the withdrawals with $220 million in redemptions, which equates to roughly 1,940 BTC. Ark 21Shares’ ARKB followed with $76 million in outflows.

Other issuers, such as Fidelity’s FBTC and Grayscale’s GBTC, posted more modest figures, shedding $7 million and $8 million, respectively.

Meanwhile, Ethereum products also saw heavy redemptions, with $240 million in outflows on Aug. 20. That brought their cumulative four-day losses to more than $925 million.

BlackRock’s ETHA bore the brunt, with $257 million in withdrawals—around 63,280 ETH—marking its second-largest outflow since launch.

In contrast, Fidelity’s FETH and Grayscale’s mini Ethereum fund registered a combined $17 million inflows, offering a small offset to the day’s broader losses.

The latest wave of redemptions illustrates the weakening short-term sentiment amid Bitcoin and Ethereum’s recent price declines. According to CryptoSlate’s data, BTC and ETH prices had posted mild recoveries of around 2% each in the last 24 hours.

]]> https://earlybirdsinvest.com/blackrocks-bitcoin-and-ethereum-etfs-leads-market-exodus-of-over-500-million/feed/ 0 54334 Malicious npm package secretly targets Atomic, Exodus wallets to intercept and reroutes funds https://earlybirdsinvest.com/malicious-npm-package-secretly-targets-atomic-exodus-wallets-to-intercept-and-reroutes-funds/ https://earlybirdsinvest.com/malicious-npm-package-secretly-targets-atomic-exodus-wallets-to-intercept-and-reroutes-funds/#respond Tue, 15 Apr 2025 06:03:40 +0000 https://earlybirdsinvest.com/malicious-npm-package-secretly-targets-atomic-exodus-wallets-to-intercept-and-reroutes-funds/

Researchers have discovered a malicious software package uploaded to npm that secretly alters locally installed versions of crypto wallets and allows attackers to intercept and reroute digital currency transactions, ReversingLabs revealed in a recent report.

The campaign injected trojanized code into locally installed Atomic and Exodus wallet software and hijacked crypto transfers. The attack centered on a deceptive npm package, pdf-to-office, which posed as a library for converting PDF files to Office formats.

When executed, the package silently located and modified specific versions of Atomic and Exodus wallets on victims’ machines, redirecting outgoing crypto transactions to wallets controlled by threat actors.

ReversingLabs said the campaign exemplifies a broader shift in tactics: rather than directly compromising open-source libraries, which often triggers swift community responses, attackers are increasingly distributing packages designed to “patch” local installations of trusted software with stealthy malware.

Targeted file patching

The pdf-to-office package was first uploaded to npm in March and updated multiple times through early April. Despite its stated function, the package lacked actual file conversion features.

Instead, its core script executed obfuscated code that searched for local installations of Atomic Wallet and Exodus Wallet and overwrote key application files with malicious variants.

The attackers replaced legitimate JavaScript files inside the resources/app.asar archive with near-identical trojanized versions that substituted the user’s intended recipient address with a base64-decoded wallet belonging to the attacker.

For Atomic Wallet, versions 2.90.6 and 2.91.5 were specifically targeted. Meanwhile, a similar method was applied to Exodus Wallet versions 25.9.2 and 25.13.3.

Once modified, the infected wallets would continue redirecting funds even if the original npm package was deleted. Full removal and reinstallation of the wallet software were required to eliminate the malicious code.

ReversingLabs also noted the malware’s attempts at persistence and obfuscation. Infected systems sent installation status data to an attacker-controlled IP address (178.156.149.109), and in some cases, zipped logs and trace files from AnyDesk remote access software were exfiltrated, suggesting an interest in deeper system infiltration or evidence removal.

Expanding software supply chain threats

The discovery follows a similar March campaign involving ethers-provider2 and ethers-providerz, which patched the ethers npm package to establish reverse shells. Both incidents highlight the rising complexity of supply chain attacks targeting the crypto space.

ReversingLabs warned that these threats continue to evolve, especially in web3 environments where local installations of open-source packages are common. Attackers increasingly rely on social engineering and indirect infection methods, knowing that most organizations fail to scrutinize already installed dependencies.

According to the report:

“This kind of patching attack remains viable because once the package is installed and the patch is applied, the threat persists even if the source npm module is removed.”

The malicious package was flagged by ReversingLabs’ machine-learning algorithms under Threat Hunting policy TH15502. It has since been removed from npm, but a republished version under the same name and version 1.1.2 briefly reappeared, indicating the threat actor’s persistence.

Investigators published hashes of affected files and wallet addresses used by the attackers as indicators of compromise (IOCs). These include wallets used for illicit fund redirection, as well as the SHA1 fingerprints of all infected package versions and associated trojanized files.

As software supply chain attacks become more frequent and technically refined, especially in the digital asset space, security experts are calling for stricter code auditing, dependency management, and real-time monitoring of local application changes.

Mentioned in this article
]]> https://earlybirdsinvest.com/malicious-npm-package-secretly-targets-atomic-exodus-wallets-to-intercept-and-reroutes-funds/feed/ 0 30863 How to Build a Cryptocurrency Wallet Like Exodus: A Comprehensive Guide for Businesses https://earlybirdsinvest.com/how-to-build-a-cryptocurrency-wallet-like-exodus-a-comprehensive-guide-for-businesses/ https://earlybirdsinvest.com/how-to-build-a-cryptocurrency-wallet-like-exodus-a-comprehensive-guide-for-businesses/#respond Tue, 08 Apr 2025 15:49:23 +0000 https://earlybirdsinvest.com/how-to-build-a-cryptocurrency-wallet-like-exodus-a-comprehensive-guide-for-businesses/
Codezeros
Coinmonks

Cryptocurrency wallets have become essential tools for managing digital assets, and Exodus stands out as a leading example. For businesses looking to enter this space, partnering with a professional cryptocurrency wallet development company is critical to creating a secure, user-friendly, and feature-rich solution. This guide breaks down the process of building a wallet like Exodus, covering key features, development steps, cost considerations, and best practices.

Exodus’s success stems from its blend of accessibility and advanced functionality. Here are the core features to prioritize:

1. Multi-Chain Support
Exodus supports 50+ blockchains, allowing users to manage Bitcoin, Ethereum, Solana, and niche tokens in one place. To replicate this:

  • Integrate APIs like Coinbase, Bitcore, or SimpleSwap.
  • Use cross-chain libraries (e.g., BitcoinJ SDK for Bitcoin, Web3.js for Ethereum).

2. Non-Custodial Security
Users retain full control of their private keys. Implement:

  • 12-word recovery phrases to restore wallets.
  • Biometric authentication (FaceID, TouchID) and encryption.
  • Avoid storing keys on servers; use device-specific Secure Enclave chips.

3. Built-In Exchange and Staking

  • Integrate real-time price feeds and decentralized exchange (DEX) APIs for in-app swaps .
  • Enable staking for proof-of-stake coins (e.g., Solana, Cardano) to let users earn passive income .

4. Web3 and dApp Integration

  • Connect to decentralized apps (dApps) and NFT marketplaces via WalletConnect.
  • Support Ethereum Virtual Machine (EVM) chains for broader compatibility.

5. User-Centric Design

  • Prioritize intuitive navigation, real-time portfolio charts, and price alerts.
  • Offer desktop and mobile apps with synchronized data .

1. Planning and Research

  • Define wallet type: Choose between hot (online) or cold (offline) storage, custodial vs. non-custodial.
  • Select blockchains: Start with Bitcoin and Ethereum, then expand to Solana, Polygon, etc.
  • Analyze competitors: Study Coinbase Wallet, Trust Wallet, and MetaMask to identify gaps.

2. Design the Architecture

  • Backend: Use Node.js for scalability and AWS for cloud hosting.
  • Frontend: Opt for React Native for cross-platform mobile apps.
  • APIs: Integrate blockchain nodes (e.g., Alchemy, Infura) for transaction broadcasting.

3. Develop Core Features

  • Key generation: Use libraries like HD Wallet-derive to create hierarchical deterministic wallets.
  • Transaction signing: Implement ECDSA (Elliptic Curve Digital Signature Algorithm) for Bitcoin or Ethereum’s keccak-256 hashing.
  • Security layers: Add 2FA, anti-phishing prompts, and SSL encryption.

4. Testing and Deployment

  • Functional testing: Verify send/receive transactions, swap accuracy, and backup flows.
  • Security audits: Hire third-party firms to check for vulnerabilities.
  • Launch: Deploy on app stores and provide 24/7 support for user issues .

Costs vary based on team location, complexity, and APIs used

  1. Security Risks
  • Problem: Hot wallets are prone to hacking.
  • Solution: Use hardware security modules (HSMs) and regular penetration testing.

2. Regulatory Compliance

  • Problem: Varying laws across regions (e.g., GDPR, MiCA).
  • Solution: Implement KYC/AML checks and geoblocking .

3. Cross-Chain Complexity

  • Problem: Managing multiple blockchain protocols.
  • Solution: Use middleware like Chainlink for interoperability.

Shido Wallet, developed by Antier Solutions, showcases best practices:

  • Tech Stack: React Native, Node.js, AWS .
  • Results: 1T+ downloads, 4.9/5 rating on Play Store .
  • Key Takeaway: Continuous updates and user feedback loops drive retention.

Building a wallet like Exodus requires expertise in blockchain, UI/UX design, and cybersecurity. A specialized cryptocurrency wallet development company like Codezeros offers:

  • Proven experience in multi-chain integration.
  • Compliance with global regulations.
  • Post-launch support and maintenance.

Ready to start your project?

Contact Codezeros for a free consultation on building a secure, scalable crypto wallet tailored to your business needs.

]]> https://earlybirdsinvest.com/how-to-build-a-cryptocurrency-wallet-like-exodus-a-comprehensive-guide-for-businesses/feed/ 0 29706 Bitcoin Spot ETF Exodus Continues: $900 Million Outflows Extend Losing Streak https://earlybirdsinvest.com/bitcoin-spot-etf-exodus-continues-900-million-outflows-extend-losing-streak/ https://earlybirdsinvest.com/bitcoin-spot-etf-exodus-continues-900-million-outflows-extend-losing-streak/#respond Sun, 16 Mar 2025 21:03:13 +0000 https://earlybirdsinvest.com/bitcoin-spot-etf-exodus-continues-900-million-outflows-extend-losing-streak/ Following the last trading window, the US Bitcoin Spot ETFs have recorded another week of overwhelming net outflows with investors pulling over $900 million from the market. This development marks the fifth consecutive week of redemptions indicating weak market confidence among institutional investors of the premier cryptocurrency.

Bitcoin Institutional Investors Withdraw For The Fifth Straight Week

After a strong start to the year which saw the Bitcoin ETFs attract over $5 billion in investments, institutional investors have shown much caution in recent weeks indicated by massive withdrawals. According to data from Farside Investors, the Bitcoin Spot ETFs registered $921.4 million in net outflows during the past week culminating in an estimated total of $5.4 billion in the last five weeks.

The majority of withdrawals from last week were pulled from BlackRock’s IBIT which recorded $338.1 million in net outflows. Fidelity’s FBTC followed closely with investors with fund redemptions outpacing deposits by $307.4 million. Other Bitcoin ETFs such as Ark’s ARKB, Invesco’s BTCO, Franklin Templeton’s EZBC, WisdomTree’s BTCW, and Grayscale’s GBTC all saw moderate net outflows between $33 million-$81 million.

 

Bitcoin

Meanwhile, Bitwise’s BITB, Valkyrie’s BRRR, and VanEck’s HODL all recorded minor net outflows not greater than $4 million. Grayscale’s BTC emerged as the only fund to have a positive showing with net inflows of $5.5 million.

The consistently high levels of withdrawals from the Bitcoin ETFs can be associated with the recent BTC market price correction. Over the last month, the maiden cryptocurrency has experienced a price decline of 11.95% reaching levels as low as $77,000. During this period, institutional investors have shown much caution, with the total net assets of the Bitcoin Spot ETFs decreasing by 21.70% to $89.89 billion according to data from SoSoValue.

Ethereum ETFs Lose $190 Million In Withdrawals

Amidst the Bitcoin ETFs’ struggles, the Ethereum Spot ETFs market is experiencing similar investor sentiment following net outflows of $189.9 million in the last week. This development marks the third consecutive week of withdrawals, bringing the total net outflows to $645.08 million within this period.

Similar to its Bitcoin counterpart, BlackRock’s ETHA experienced the largest withdrawals of the past week valued at $63.3 million. At the time of writing, total cumulative inflows into the Ethereum ETF market are valued at $2.52 billion with total net assets standing at $6.72 billion i.e. 2.90% of the ETH market cap.

Meanwhile, Ethereum continues to trade at $1,924 reflecting a 0.73% gain in the past 24 hours. On the other hand, Bitcoin is valued at $84,009 with no significant price change on its daily chart.

Bitcoin

]]> https://earlybirdsinvest.com/bitcoin-spot-etf-exodus-continues-900-million-outflows-extend-losing-streak/feed/ 0 25521 Thorchain faces developer exodus amid North Korean money laundering scandal https://earlybirdsinvest.com/thorchain-faces-developer-exodus-amid-north-korean-money-laundering-scandal/ https://earlybirdsinvest.com/thorchain-faces-developer-exodus-amid-north-korean-money-laundering-scandal/#respond Fri, 28 Feb 2025 02:56:54 +0000 https://earlybirdsinvest.com/thorchain-faces-developer-exodus-amid-north-korean-money-laundering-scandal/

Thorchain is experiencing a developer exodus, as hackers from Lazarus Group are using the interoperability-focused blockchain to launder Ethereum (ETH) stolen in the Bybit hack.

A Thorchain developer known as TCB announced that Pluto, the protocol’s unofficial lead developer, is stepping down. TCB himself has also indicated his imminent departure unless a swift resolution is implemented to prevent illicit flows linked to North Korean actors.

TCB’s statement highlighted a long-standing divide between Thorchain’s messaging around decentralization and the reality of its infrastructure.

According to the developer, the protocol claims to be censorship-resistant and permissionless, but in reality, a small group of corporate actors control most of the network’s infrastructure and user-facing services. He argued that this contradiction exposes the protocol to regulatory scrutiny and threatens its long-term viability.

Thorchain is a permissionless protocol focused on interoperability. However, given its feature of swapping native assets on their respective blockchains, bad actors have leveraged Thorchain’s infrastructure to obscure stolen funds. This is the case following the Bybit hack, which resulted in $1.5 billion lost on Feb. 21.

Recently, TCB, Pluto, and another developer known as Oleg Petrov used their power as validators to vote to halt ETH trading on Thorchain to prevent Lazarus Group from laundering money.

Centralization and validator limitations

Thorchain’s design choices have contributed to what TCB describes as an overly centralized network incapable of withstanding regulatory pressure.

Unlike Ethereum and Bitcoin (BTC), which boast thousands of independent validators, Thorchain relies on a smaller, tightly controlled group of operators. The network’s requirement for full infrastructure replication across all supported blockchains further complicates validator onboarding, limiting decentralization.

Efforts to address these concerns, including proposals for lighter node implementations and an expanded validator set, have been met with resistance. 

While other protocols, such as Chainflip, have swiftly implemented censorship measures at the network level, Thorchain has yet to adopt similar strategies, which contradicts industry trends.

Crisis on the horizon

According to TCB, many wallet providers that facilitate the bulk of Thorchain’s non-illicit transaction volume already enforce transaction filtering on their frontends. If Thorchain continues to allow illicit funds to flow through its network, these providers may sever their integrations, further isolating the protocol from legitimate liquidity sources. 

TCB warned that the departure of these providers, combined with regulatory scrutiny, could result in a crisis for Thorchain. With major infrastructure providers and developers now reconsidering their involvement, the protocol faces operational and reputational risks.

The concerns raised reflect broader industry tensions between decentralization ideals and the realities of compliance with global anti-money laundering frameworks. The potential for Thorchain to be implicated in North Korea’s largest-ever crypto theft raises the stakes significantly.

TCB asserted that when most transaction flows consist of stolen funds linked to a sanctioned state actor, the issue moves beyond protocol governance and into national security territory. He added that Thorchain may face enforcement actions that could jeopardize its operations if it is perceived as a conduit for large-scale money laundering.

Mentioned in this article
Blocscale
]]> https://earlybirdsinvest.com/thorchain-faces-developer-exodus-amid-north-korean-money-laundering-scandal/feed/ 0 22322