Superoo7, head of data and AI at Chromia, said in a post that there is a potential vulnerability in most Crypto-MCPs that could allow hackers to redirect user transactions to hacker wallets through Cursor and Anthropic's Claude platform. The vulnerability stems from "poisoned" MCPs, and users may be unaware of the problem. Superoo7 recommends using a trusted MCP server, reducing funds in wallets, and using the MCP-Scan tool for protection.
Chromia数据与AI负责人superoo7发文表示,大多数Crypto-MCPs中存在潜在漏洞,可能导致黑客通过Cursor和Anthropic的Claude平台将用户交易重定向至黑客钱包。该漏洞源于“中毒”的MCPs,用户可能对问题一无所知,superoo7建议使用受信任的MCP服务器,减少钱包中的资金,并使用MCP-Scan工具进行保护。