Alert: A counterfeit Ledger Live app listed on Apple's App Store siphoned $9.5 million from more than 50 victims between April 7–13. Users are urged to stay vigilant and verify they are downloading the official app.

RT Daniel — CoW Swap alerted users that it is investigating a possible domain hijacking involving its web presence. The incident underscores a persistent risk for crypto protocols: even with robust design and repeated smart-contract audits, the project's website can remain an exposed attack surface.

Bitcoin climbed above $76,000 on the day, while Ether rose 6% to break $2,300. The wider crypto market also advanced, with XRP, BNB and other major tokens extending gains as trading volume picked up across leading assets.

Blockchain investigator @zachxbt said a counterfeit Ledger Live app distributed via Apple's App Store stole about $9.5 million from more than 50 victims across five blockchains between Apr. 7–13. The funds were routed through over 150 KuCoin addresses linked to the AudiA6 mixer. Apple has since removed the app.

CoW Swap said it has been hit by a DNS hijack. The project stated its backend and APIs remain secure, but it has temporarily paused services as a precaution. Users are advised not to interact with CoW Swap until the issue is fully resolved.

CoW Swap has temporarily paused its protocol following a domain hijacking incident.

Gold and silver traded higher by midday Tuesday after the U.S. dollar index slid to a six-week low overnight. A firmer risk-on tone also lifted the traditionally safe-haven metals, as traders bet that improved consumer and commercial demand, along with easing inflation pressures, could follow if U.S.-Iran truce talks resume. June gold was last up $63.50 at $4,831.50. May silver gained $3.59 to $79.27. Full article at Kitco:

CoWSwap's frontend has been flagged for suspected malicious activity after Blockaid reported detecting a frontend attack and marking the domain unsafe. Users are being advised to avoid the dApp entirely while the team investigates. Initial indications point to a compromised interface generating malicious transaction prompts. The primary risk is users unknowingly signing wallet-draining approval transactions. Frontend attacks typically do not compromise smart contracts directly; they manipulate what users see and approve. Anyone who interacted recently should revoke token approvals and review recent transactions immediately.

Blockchain data shows a transfer of 150,000,000 USDC, valued at USD 149,939,550, from Coinbase to an unidentified wallet.