[Warning] Blockchain.com explorer has been compromised!!! [fixed]

[SFR10]

Earlier in the day, I noticed strange behavior on the Blockchain.com explorer while monitoring specific addresses... The URL was showing the correct links, but the addresses were different, so the first thing that came to my mind was that I might've been a victim of a clipboard hijacker, but after doing some digging, it appears that the explorer in question has been compromised ^{[I still don't know if it extends to their wallets as well, but some of addresses on the following links have been funded recently (probably by some of their wallet users)]}:

• Blockchain.com explorer has been compromised or something
• Has anyone else recently noticed that following a link to a BTC address on blockchain.com redirects you to another BTC address?
  ^{- You have to rely on Google Translate for this one.}

[Yamane_Keto]

I tried that and got some random addresses.

Blockchain.com API is a widely used among market analysis tools, wallets, and payment gateways.
This will inevitably affect many services and may cause a lot of losses.

[Bitcoin_Arena]

I think it has been fixed?

I am not sure what the aim of the attack was, but I believe it was targeting people who like to paste their address on the explorer and then use the transaction history to copy addresses they have ever deposited Bitcoins to in the past so they can deposit more Bitcoins. They basically use the explorer as a notebook for their past deposit addresses instead of just generating it from an exchange or a casino.

[SFR10]

This will inevitably affect many services and may cause a lot of losses.

I think it has been fixed?

Yes, it appears to be finally fixed... I'm quite shocked at the fact that they had time to post this "nonsense on X", but they didn't even bother to warn their own users about the incident in question ^[SMH]!
^{- This "address" from the second Reddit thread already has over $20k, while the remaining ones on that list affected more users (smaller amounts).}

[Yamane_Keto]

Yes, it appears to be finally fixed...

They haven't added any updates to https://www.blockchain.com/explorer/news and I haven't found any complaints about hacking or loss of coin via Google or by reading the replies via Reddit, it's more likely a bug. Their failure to talk about it is completely unprofessional.

[SFR10]

They haven't added any updates to https://www.blockchain.com/explorer/news

I don't think they'll be posting such updates on their news aggregator... Their "blog" or their account on "X" are probably the best places for these kinds of updates ^{[unfortunately, neither has mentioned anything so far]}.

and I haven't found any complaints about hacking or loss of coin via Google or by reading the replies via Reddit, it's more likely a bug.

Same here... If it's just a bug, it's a costly one, but seeing that in addition to the new addresses that received large amounts, an "inactive address since 2014" also received multiple transfers in the past two days ^{[over $1k]}, it makes me believe this isolated incident is more than just a bug ^{[I hope I'm wrong]}.

[rohang]

Wow this is huge and could have cost people alot of money

Was the address qr different too? Does blockchain.com even show that i am not sure