During TOKEN2049, multiple crypto security attacks were exposed, with one trader suffering losses exceeding $4 million.

During the recent Singapore TOKEN2049 conference, hackers targeted cryptocurrency traders and investors using fake public Wi-Fi hotspots, phishing pages, and social engineering tactics. Attackers set up malicious networks mimicking hotels, airports, and the conference venue, stealing device data and subsequently hot wallet assets via man-in-the-middle attacks, fake login pages, and malicious app updates. Separately, an off-site event titled "Don't Get Played" has been linked to fraud: organizers claiming to be Apex Accelerator and Stone Venture lured participants to install remote access malware on their laptops under the pretext of cybersecurity training, gaining control of devices to steal private keys. Related victims have filed reports with Singaporean police. Prominent crypto trader Frogman stated he was hacked during the event, losing 9 tokens from two major wallets, totaling over $4 million. The report reminds users who connected to suspicious networks or installed unknown software to promptly transfer assets to secure devices or cold wallets, revoke suspicious contract authorizations, and reset relevant passwords and two-factor authentication credentials. It is important to note that some attack groups and event details are reported or victim allegations and have not been officially confirmed.