🚨 GCSA Insight: Three Platforms. Three Security Warnings. From KuCoin exchange impersonation and malicious software distribution to Bitkub AI tool supply chain risks and a $1.01M smart contract exploit in the Avalanche ecosystem. 🔍 GCSA's latest investigation reveals: 🔹 KuCoin: Attackers impersonated an official sender identity to lure users into downloading suspected remote access software. KuCoin has since confirmed and remediated a DMARC configuration issue. 🔹 Bitkub: A previously referenced MCP package was re-registered by a third party, raising potential supply chain poisoning and API credential exposure risks. 🔹 Avalanche: A settlement logic flaw in the TranchePool smart contract enabled approximately $1.01M in USDC withdrawals. Different threats. Different attack surfaces. One lesson: Trust is the attack surface. Read the full GCSA investigation: #GCSAinsights# #Cybersecurity# #Web3Security#